Sql injection

2008-01-1822:00:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

JSON

Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.

CPENameOperatorVersion
clever_copyle3.0

CPE	Name	Operator	Version
	clever_copy	le	3.0

References

secunia.com/advisories/28560

securityreason.com/securityalert/3553

www.securityfocus.com/archive/1/486492/100/0/threaded

www.securityfocus.com/bid/27335

exchange.xforce.ibmcloud.com/vulnerabilities/39746