CVEvulnerability
CVE-2011-5200
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-09-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) list.php, (2) members.php, or (3) book.php.
Affected configurations
• dedecms dedecms 5.6
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.exploit-db.com/exploits/18292 Exploit
- http://www.osvdb.org/82506 www.osvdb.org
- http://www.osvdb.org/82507 www.osvdb.org
- http://www.osvdb.org/82508 www.osvdb.org
- http://www.securityfocus.com/bid/51211 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72034 exchange.xforce.ibmcloud.com
- http://www.exploit-db.com/exploits/18292 Exploit
- http://www.osvdb.org/82506 www.osvdb.org
- http://www.osvdb.org/82507 www.osvdb.org
- http://www.osvdb.org/82508 www.osvdb.org
- http://www.securityfocus.com/bid/51211 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72034 exchange.xforce.ibmcloud.com