Plume-cms : Security vulnerabilities, CVEs published in 2009

CVE-2009-3418

Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit_link action to manager/tools.php. NOTE: some of these details are obtained from third party information.

Max CVSS

6.5

EPSS Score

0.14%

Published

2009-09-25

Updated

2011-11-10

1 vulnerabilities found

Plume-cms : Security Vulnerabilities, CVEs, Published In 2009

CVE-2009-3418