CVE-2014-9242

WebsiteBaker 2.8.3 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary SQL commands via the page_id parameter.

Exploits (1)

exploitdb WRITEUP

webappsphp

https://www.exploit-db.com/exploits/35277

View Code ZIP pw:eip

References (2)

[Exploit] http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html

[Exploit] http://seclists.org/fulldisclosure/2014/Nov/44

Scores

EPSS 0.0083

EPSS Percentile 74.6%

Details

CWE

CWE-89

Status published

Products (1)

websitebaker/websitebaker 2.8.3

Published Dec 03, 2014

Tracked Since Feb 18, 2026