Security Advisory

CVE-2011-5076

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-02-08 00:00:00
Last updated 2024-09-16 16:23:57
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php. NOTE: some of these details are obtained from third party information.