Unscored CVE-2010-0950 EUVD-2010-0975GHSA-mqrg-cpw8-p859

Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via the id_str parameter…

Published Mar 9, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via the id_str parameter to (1) index.php and (2) a_index.php.

References

20100305 SQL injection vulnerability in Natychmiast CMS mailing-list
http://www.packetstormsecurity.com/1003-exploits/natychmiast-sqlxss.txt
natychmiast-index-sql-injection(56725) vdb-entry
38561 vdb-entry