SQL Injection in Mntechsolutions Theeta Cms
CVE-2009-4783
Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL commands via the start parameter to (1) forum.php and (2) thread.php in community/, and (3) blog/index.php.
Vulnerability class: SQL Injection
EPSS: 0.010 (59.0th percentile) — read the EPSS interpretation.
Affected products
- Mntechsolutions Theeta_cms — versions 0.01, 0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)