Cells Blog CMS Multiple SQL Injection and HTML Injection Vulnerabilities
BID:54009
Info
Cells Blog CMS Multiple SQL Injection and HTML Injection Vulnerabilities
| Bugtraq ID: | 54009 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2012 12:00AM |
| Updated: | Jun 14 2012 12:00AM |
| Credit: | Vulnerability Research Lab |
| Vulnerable: |
cells Cells Blog 1.1 |
| Not Vulnerable: | |
Discussion
Cells Blog CMS Multiple SQL Injection and HTML Injection Vulnerabilities
Cells Blog CMS is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
Exploiting these issues may allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, execute HTML and script code in the context of the affected site, steal cookie-based authentication credentials, or control how the site is rendered to the user; other attacks are also possible.
Cells Blog CMS 1.1 is vulnerable; other versions may also be affected.
Cells Blog CMS is prone to multiple SQL-injection and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data.
Exploiting these issues may allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, execute HTML and script code in the context of the affected site, steal cookie-based authentication credentials, or control how the site is rendered to the user; other attacks are also possible.
Cells Blog CMS 1.1 is vulnerable; other versions may also be affected.