CVE-2013-6058
appRain CMF < 3.0.2 - SQL Injection via PATH_INFO to blog-by-cat/
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-6058. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This advisory describes a blind SQL injection vulnerability in appRain 3.0.2, where insufficient validation of user-supplied data in the '/blog-by-cat/' URL parameter allows arbitrary SQL command execution. The example provided demonstrates conditional query manipulation to infer database information.
Description
SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/.
Exploits (1)
This advisory describes a blind SQL injection vulnerability in appRain 3.0.2, where insufficient validation of user-supplied data in the '/blog-by-cat/' URL parameter allows arbitrary SQL command execution. The example provided demonstrates conditional query manipulation to infer database information.