CVE-2013-3523

This HTML Is Simple < 1.2.4 - SQL Injection via op=page&id= URL Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page&id= in the URL.

References (4)

Core 4
Core References
Release Notes x_refsource_misc
http://freecode.com/projects/this/releases/353516
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84168
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/91976
Various Sources vdb-entry x_refsource_xf
http://xforce.iss.net/xforce/xfdb/84168

Scores

EPSS 0.0155
EPSS Percentile 72.5%

Details

CWE
CWE-89
Status published
Products (20)
gajennings/this 1.0.1
gajennings/this 1.0.2
gajennings/this 1.0.3
gajennings/this 1.0.4
gajennings/this 1.0.5
gajennings/this 1.0.6
gajennings/this 1.1.0
gajennings/this 1.1.1
gajennings/this 1.1.2
gajennings/this 1.1.3
... and 10 more
Published May 10, 2013
Tracked Since Feb 18, 2026