Vulnerabilities > Liberiacms
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-10-22 | CVE-2008-4701 | SQL Injection vulnerability in Liberiacms Liberia CMS 1.00/1.10/1.11 SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_user cookie parameter, a different vector than CVE-2008-4700. | 6.8 |
2008-10-22 | CVE-2008-4700 | SQL Injection vulnerability in Liberiacms Liberia CMS 1.00/1.10/1.11 SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_pass cookie parameter. | 6.8 |