Campware.org: >> Campsite >> 3.2.0 Security Vulnerabilities
SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
CVSS Score
7.5
EPSS Score
0.008
Published
2010-05-07