CVE-2011-0644

NONE

Published Jan 25, 201115y ago · Modified Jun 16, 20262w ago

Published Jan 25, 2011 15y ago

Last Modified Jun 16, 2026 2w ago

Description

SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flash_upload.php.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
phpcms	phpcms_2008	2	any

References 5

osvdb.org http://osvdb.org/70598

Exploit
secunia.com http://secunia.com/advisories/43007

Vendor Advisory
exploit-db.com http://www.exploit-db.com/exploits/16019

Exploit
securityfocus.com http://www.securityfocus.com/bid/45933

Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/64828

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.