Description
SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the (1) nodeID, (2) pageID, (3) ID, and (4) parentid parameter to index.cfm; and (5) documentFormatId parameter to document/docWindow.cfm.
References
- http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html
- 18145 third-party-advisory
- communityenterprise-multiple-sql-injection(23818) vdb-entry
- 21969 vdb-entry
- ADV-2005-2979 vdb-entry
- 21855 vdb-entry