CVE-2014-2211

EPSS 2.4%

SQL injection vulnerability in portal/addtoapplication.php in POSH (aka Posh portal or Portaneo) 3.0 before 3.3.0 allows remote attackers to execute arbitrary SQL commands via the rssurl parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/39108unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://seclists.org/oss-sec/2014/q1/444 http://sourceforge.net/p/posh/svn/3540/http://www.securityfocus.com/bid/65817 http://www.sysdream.com/CVE-2014-2211_2214 http://www.sysdream.com/system/files/POSH-3.2.1-advisory_0.pdf