CVE-2015-1423
Gecko CMS 2.2-2.3 - Authenticated SQL Injection via Admin Index Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-1423. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Gecko CMS 2.3, including CSRF for admin creation, stored and reflected XSS, and SQL injection. It provides specific payloads and parameters for exploitation.
Description
Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1) jak_delete_log[] or (2) ssp parameter to admin/index.php.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in Gecko CMS 2.3, including CSRF for admin creation, stored and reflected XSS, and SQL injection. It provides specific payloads and parameters for exploitation.