Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-1372.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in ferretCMS v1.0.4-alpha, including stored/reflected XSS, SQL injection, and arbitrary file upload. It provides specific URLs and payloads for exploitation but does not include functional exploit code.
Description
SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php.
Exploits (1)
This advisory details multiple vulnerabilities in ferretCMS v1.0.4-alpha, including stored/reflected XSS, SQL injection, and arbitrary file upload. It provides specific URLs and payloads for exploitation but does not include functional exploit code.