CVE-2013-4789

SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
cotonticotonti_siena
𝑥
≤ 0.9.13
cotonticotonti_siena
0.9.0
cotonticotonti_siena
0.9.1
cotonticotonti_siena
0.9.2
cotonticotonti_siena
0.9.3
cotonticotonti_siena
0.9.4
cotonticotonti_siena
0.9.5
cotonticotonti_siena
0.9.6
cotonticotonti_siena
0.9.7
cotonticotonti_siena
0.9.8
cotonticotonti_siena
0.9.9
cotonticotonti_siena
0.9.10
cotonticotonti_siena
0.9.11
cotonticotonti_siena
0.9.12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/95842
http://secunia.com/advisories/54289
http://www.cotonti.com/forums?m=posts&q=7475
http://www.cotonti.com/news/announce/siena_0914_released
http://www.securityfocus.com/bid/61538
https://github.com/Cotonti/Cotonti/commit/45eec046391afabb676b62b9201da0cd530360b4
https://www.htbridge.com/advisory/HTB23164
http://osvdb.org/95842
http://secunia.com/advisories/54289
http://www.cotonti.com/forums?m=posts&q=7475
http://www.cotonti.com/news/announce/siena_0914_released
http://www.securityfocus.com/bid/61538
https://github.com/Cotonti/Cotonti/commit/45eec046391afabb676b62b9201da0cd530360b4
https://www.htbridge.com/advisory/HTB23164