CVE-2007-6656: SQL Injection
Published Jan 4, 2008
·Updated
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple<=1.2.2
Event History
Jan 4, 2008
CVE Published
11:46 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6656?
CVE-2007-6656 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2007-6656?
To fix CVE-2007-6656, upgrade CMS Made Simple to version 1.2.3 or later.
3
What software is affected by CVE-2007-6656?
CVE-2007-6656 affects CMS Made Simple versions 1.2.2 and earlier.
4
What type of vulnerability is CVE-2007-6656?
CVE-2007-6656 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Can CVE-2007-6656 be exploited remotely?
Yes, CVE-2007-6656 can be exploited remotely by attackers targeting the affected software.