Description
CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/150516
Exploit, Third Party Advisory x_refsource_misc
https://imgur.com/a/buXJJKC
Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/149571/CMS-ISWEB-3.5.3-SQL-Injection.html
Issue Tracking, Third Party Advisory x_refsource_misc
https://cxsecurity.com/issue/WLB-2018090249
Scores
CVSS v3
9.8
EPSS
0.0256
EPSS Percentile
83.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
isweb/isweb
3.5.3
Published
Sep 28, 2018
Tracked Since
Feb 18, 2026