Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the story_id parameter to ixm_ixpnews.php, and unspecified other vectors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ixprim_cms | Ixprim | 1.2 (including) | 1.2 (including) |