Description
SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to the default URI.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75345
Exploit x_refsource_misc
http://packetstormsecurity.com/files/132216/Persian-Car-CMS-1.0-SQL-Injection.html
Scores
EPSS
0.0189
EPSS Percentile
77.4%
Details
CWE
CWE-89
Status
published
Products (1)
persian_car_cms_project/persian_car_cms
1.0
Published
Jun 19, 2015
Tracked Since
Feb 18, 2026