CVE-2011-0645

NONE EPSS 58.5%

Published Jan 25, 201115y ago · Modified Jun 16, 20262w ago

Published Jan 25, 2011 15y ago

Last Modified Jun 16, 2026 2w ago

Description

SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time parameter in a get action.

Threat Intelligence

EPSS Exploit Probability

58.5% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
phpcms	phpcms_2008	2	any

References 4

osvdb.org http://osvdb.org/70655
securityreason.com http://securityreason.com/wlb_show/WLB-2011010077

Exploit
securityfocus.com http://www.securityfocus.com/bid/45913

Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/64828

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.