Security Advisory

CVE-2011-1055

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-02-21 18:00:00

Last updated 2024-08-06 22:14:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.user_id parameter to media.cfm.

← Browse all CVEs View on cve.org ↗