CVE-2011-1055
published 2011-02-21CVE-2011-1055: SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.user_id…
PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.15%
62.9th percentile
SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.user_id parameter to media.cfm.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| lingxia273 | lingxia_i.c.e_cms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/43327http://www.exploit-db.com/exploits/16171http://www.securityfocus.com/bid/46373http://www.stratsec.net/Research/Advisories/Lingxia-273-I-C-E-CMS-Blind-SQL-Injection-%28SS-2011https://exchange.xforce.ibmcloud.com/vulnerabilities/65462https://exchange.xforce.ibmcloud.com/vulnerabilities/65477http://secunia.com/advisories/43327http://www.exploit-db.com/exploits/16171http://www.securityfocus.com/bid/46373http://www.stratsec.net/Research/Advisories/Lingxia-273-I-C-E-CMS-Blind-SQL-Injection-%28SS-2011https://exchange.xforce.ibmcloud.com/vulnerabilities/65462https://exchange.xforce.ibmcloud.com/vulnerabilities/65477
2011-02-21
Published