Sql injection

2008-04-1719:05:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.0%

JSON

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
comdev_news_publishereq4.1.2

CPE	Name	Operator	Version
	comdev_news_publisher	eq	4.1.2

References

secunia.com/advisories/29697

www.securityfocus.com/bid/28622

exchange.xforce.ibmcloud.com/vulnerabilities/41663

www.exploit-db.com/exploits/5362