CVE-2015-1372

High

Published: 27/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php.

Risk Assessment

Attackers may gain access to the database, potentially leading to data theft or system compromise.

Recommendation

It is recommended to update ferretCMS to the latest version to eliminate this vulnerability and implement input data filtering.

Other vulnerabilities in ferretCMS 1.0.4-alpha

CVE-2015-1371High
The unrestricted file upload vulnerability in ferretCMS version 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request.

Original NVD description (English source)

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php.