CVE-2014-8506
Etiko CMS - SQL Injection via page_id or article_id Parameter
Title source: llmDescription
Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the (1) page_id parameter to loja/index.php or (2) article_id parameter to index.php.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/97030
Exploit x_refsource_misc
http://packetstormsecurity.com/files/128644/Etiko-CMS-Cross-Site-Scripting-SQL-Injection.html
Scores
EPSS
0.0184
EPSS Percentile
76.7%
Details
CWE
CWE-89
Status
published
Products (1)
etiko/etiko_cms
Published
Oct 28, 2014
Tracked Since
Feb 18, 2026