CVE-2008-1913

SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:lasernet_cms:lasernet_cms:1.5:*:*:*:*:*:*:*
cpe:2.3:a:lasernet_cms:lasernet_cms:1.11:*:*:*:*:*:*:*

Information

Published : 2008-04-21 21:41

Updated : 2017-09-28 18:30


NVD link : CVE-2008-1913

Mitre link : CVE-2008-1913


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

lasernet_cms

  • lasernet_cms