CVE-2015-1467 – Multiple SQL injection vulnerabilities in Translations in Fork CMS before

Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) language[] or (2) type[] parameter to private/en/locale/index.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1467

Reference (s):

• BUGTRAQ:20150204 [CVE-2015-1467] Fork CMS – SQL Injection in Version 3.8.5
• URL: http://www.securityfocus.com/archive/1/534616/100/0/threaded
• http://www.fork-cms.com/blog/detail/fork-3.8.6-released
• http://packetstormsecurity.com/files/130242/Fork-CMS-3.8.5-SQL-Injection.html
• XF:forkcms-cve20151467-sql-injection(100668)