Description
SQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it is not clear, but this might be an application service provider, in which case it might be excluded from CVE.
References
- 15464 vdb-entry
- oncontent-pid-sql-injection(23072) vdb-entry
- 20888 vdb-entry
- 17596 third-party-advisory
- http://osvdb.org/ref/20/20888-oncontent-sql.txt