Description

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie.

Remediation

References

CVE-2005-3963

Related Vulnerabilities

Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5306)

WordPress Plugin Attach Gallery Posts Cross-Site Scripting (1.6)

WordPress Plugin cformsII HTML Injection (15.0.1)

WordPress Plugin Code Embed 'suffix' Parameter Cross-Site Scripting (2.0.1)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9751)

Severity

High

Classification

CVE-2005-3963

Tags

Missing Update Known Vulnerabilities