18292exploit
http://www.exploit-db.com/exploits/18292 CVE-2011-5200
Dede CMS - SQL Injection
Record summary
CVE-2011-5200 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) list.php, (2) members.php, or (3) book.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBDede CMS - SQL InjectionExploitDB exploitby CWH & NafshNot analyzed1 file
References
782506vdb entry
http://www.osvdb.org/82506 82507vdb entry
http://www.osvdb.org/82507 82508vdb entry
http://www.osvdb.org/82508 51211vdb entry
http://www.securityfocus.com/bid/51211 dedecms-multiple-sql-injection(72034)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72034 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-5200