Unscored CVE-2010-0454 EUVD-2010-0485GHSA-pxr7-r9vh-7q86

SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via …

Published Jan 28, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via the sid parameter.

References

20100125 Publique! CMS SQL Injection Vulnerabilities mailing-list
38302 third-party-advisory
61941 vdb-entry
http://packetstormsecurity.org/1001-exploits/publique-sql.txt