header-logo
Suggest Exploit
vendor:
Komodo CMS
by:
7.5
CVSS
HIGH
Input Validation
CWE
Product Name: Komodo CMS
Affected Version From: 2.1
Affected Version To: 2.1
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

Komodo CMS Multiple Input Validation Vulnerabilities

Komodo CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

Mitigation:

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/15966/info

Komodo CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

These issues affect Komodo CMS version 2.1; other versions may also be vulnerable. 

http://www.example.com/page.php?page=[SQL]

Navigation

Suggest Exploit

Services By CQR