Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-2303. PoCs published by RedTeam Pentesting GmbH.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in webEdition CMS versions 6.3.3.0 through 6.3.8.0. It indicates that the application fails to sanitize user input, allowing attackers to manipulate SQL queries via the 'what' parameter in the 'we_fs.php' file.
Description
Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 before -s1 allow remote attackers to execute arbitrary SQL commands via the (1) table or (2) order parameter.
Exploits (1)
The provided text describes an SQL injection vulnerability in webEdition CMS versions 6.3.3.0 through 6.3.8.0. It indicates that the application fails to sanitize user input, allowing attackers to manipulate SQL queries via the 'what' parameter in the 'we_fs.php' file.