First published: Thu Jan 24 2008(Updated: )
Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) siteadmin/article-edit.php; and unspecified parameters to (2) submitted-edit.php, (3) page-edit.php, (4) section-edit.php, (5) staff-edit.php, and (6) staff-access.php in siteadmin/.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PacerCMS | =0.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-0451 has a medium severity rating due to its potential for enabling unauthorized access to sensitive data through SQL injection.
To fix CVE-2008-0451, update PacerCMS to a version beyond 0.6 where the SQL injection vulnerabilities have been addressed.
CVE-2008-0451 affects users of PacerCMS version 0.6 who have remote authenticated access.
CVE-2008-0451 presents multiple SQL injection vulnerabilities that allow potential execution of arbitrary SQL commands.
The vulnerable components in CVE-2008-0451 include siteadmin/article-edit.php and various editing scripts like submitted-edit.php and page-edit.php.