Vulnerability Description
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION).
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Softcms | <= 1.5 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/94394Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02MitigationThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/94394Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-322-02MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-9333?
CVE-2016-9333 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's ...
How severe is CVE-2016-9333?
CVE-2016-9333 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-9333?
Check the references section above for vendor advisories and patch information. Affected products include: Moxa Softcms.