CVE-2013-4789

EUVD-2013-4635
SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
cotonticotonti_siena
𝑥
≤ 0.9.13
cotonticotonti_siena
0.9.0
cotonticotonti_siena
0.9.1
cotonticotonti_siena
0.9.2
cotonticotonti_siena
0.9.3
cotonticotonti_siena
0.9.4
cotonticotonti_siena
0.9.5
cotonticotonti_siena
0.9.6
cotonticotonti_siena
0.9.7
cotonticotonti_siena
0.9.8
cotonticotonti_siena
0.9.9
cotonticotonti_siena
0.9.10
cotonticotonti_siena
0.9.11
cotonticotonti_siena
0.9.12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/95842
http://secunia.com/advisories/54289
http://www.cotonti.com/forums?m=posts&q=7475
http://www.cotonti.com/news/announce/siena_0914_released
http://www.securityfocus.com/bid/61538
https://github.com/Cotonti/Cotonti/commit/45eec046391afabb676b62b9201da0cd530360b4
https://www.htbridge.com/advisory/HTB23164
http://osvdb.org/95842
http://secunia.com/advisories/54289
http://www.cotonti.com/forums?m=posts&q=7475
http://www.cotonti.com/news/announce/siena_0914_released
http://www.securityfocus.com/bid/61538
https://github.com/Cotonti/Cotonti/commit/45eec046391afabb676b62b9201da0cd530360b4
https://www.htbridge.com/advisory/HTB23164