Unscored CVE-2015-5617 EUVD-2015-5569GHSA-2qmc-7r7p-g995

SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arb…

Published Feb 12, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.

References

http://packetstormsecurity.com/files/133082/Enorth-Webpublisher-CMS-SQL-Injection.html
http://seclists.org/fulldisclosure/2015/Aug/55