CVE-2013-3727

SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to…

published March 13, 2014

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02909 · 86.9th percentile
Published
2014-03-13T14:00Z
EPSS history
Timeline
  • 13 MAR 14:00Z
    SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to…
    cvelistv5