SQL Injection Vulnerability in Ginkgo CMS by Ginkgo
CVE-2013-5318

Currently unrated

Key Information:

Vendor: Benjamin Arnaudetr
Status: Ginkgocms
Vendor: CVE Published:; 20 August 2013

🔔 Create Benjamin Arnaudetr Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2013-5318?

The SQL injection vulnerability in Ginkgo CMS 5.0 enables remote attackers to manipulate SQL queries through the rang parameter in index.php. This flaw allows unauthorized commands to be executed, potentially compromising the integrity and confidentiality of the database. Proper input validation and sanitization measures are essential to mitigate this security issue.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2013-5318 - Proof of Concept

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/86395

vdb-entryx_refsource_XF

http://www.exploit-db.com/exploits/27274

exploitx_refsource_EXPLOIT-DB

http://secunia.com/advisories/54485

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

🟡
Public PoC available
Aug 20, 2013
👾
Exploit known to exist
Aug 20, 2013
Vulnerability published
Aug 20, 2013
Vulnerability Reserved
Aug 20, 2013

CVE-2013-5318 Data

JSON