Sql injection

2009-09-1820:30:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.2%

JSON

Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.

CPENameOperatorVersion
rockbandcmseq0.10

CPE	Name	Operator	Version
	rockbandcms	eq	0.10

References

secunia.com/advisories/36517

www.vupen.com/english/advisories/2009/2494

exchange.xforce.ibmcloud.com/vulnerabilities/52940

www.exploit-db.com/exploits/9553