CVE-2013-6839: SQL Injection
Published Dec 13, 2013
·Updated
SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/[id].
Affected Software
1 affected component
InstantSoft InstantCMS<=1.10.3
Remediation
Patch Available
Event History
Dec 13, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·06:07 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6839?
CVE-2013-6839 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2013-6839?
To fix CVE-2013-6839, upgrade InstantCMS to version 1.10.4 or later.
3
What impact does CVE-2013-6839 have on my system?
CVE-2013-6839 allows remote attackers to execute arbitrary SQL commands, potentially compromising the database.
4
Which versions of InstantCMS are affected by CVE-2013-6839?
CVE-2013-6839 affects InstantCMS versions up to and including 1.10.3.
5
Is CVE-2013-6839 a remote or local vulnerability?
CVE-2013-6839 is a remote vulnerability that can be exploited over the network.