Vulnerability in Thorcms

CVE-2006-3270

SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via multiple unspecified parameters, such as the add_link_mid parameter. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.

EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.

Affected products

  • Thorcms — versions 1.3.1
  • N/a — versions n/a

References