Test ID:	1.3.6.1.4.1.25623.1.0.106364
Category:	Web application abuses
Title:	dotCMS < 3.3.1 Multiple SQLi Vulnerabilities - Active Check
Summary:	dotCMS is prone to multiple SQL injection (SQLi); vulnerabilities.
Description:	Summary: dotCMS is prone to multiple SQL injection (SQLi) vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2016-8902: SQL injection (SQLi) in the categoriesServlet allows remote not authenticated attackers to execute arbitrary SQL commands via the sort parameter. - CVE-2016-8903: SQL injection (SQLi) in the 'Site Browser > Templates pages' screen allows remote authenticated attackers to execute arbitrary SQL commands via the _EXT_13_orderby parameter. - CVE-2016-8904: SQL injection (SQLi) in the 'Site Browser > Containers pages' screen allows remote authenticated attackers to execute arbitrary SQL commands via the _EXT_12_orderby parameter. - CVE-2016-8905: SQL injection (SQLi) in the JSONTags servlet allows remote authenticated attackers to execute arbitrary SQL commands via the sort parameter. - CVE-2016-8906: SQL injection (SQLi) in the 'Site Browser > Links page' screen allows remote authenticated attackers to execute arbitrary SQL commands via the _EXT_18_orderby parameter. - CVE-2016-8907: SQL injection (SQLi) in the 'Content Types > Content Types' screen allows remote authenticated attackers to execute arbitrary SQL commands via the _EXT_STRUCTURE_orderBy and _EXT_STRUCTURE_direction parameters. - CVE-2016-8908: SQL injection (SQLi) in the 'Site Browser > HTML pages' screen allows remote authenticated attackers to execute arbitrary SQL commands via the _EXT_15_orderby parameter. Vulnerability Impact: An attacker may execute arbitrary SQL commands. Affected Software/OS: dotCMS prior to version 3.3.1. Solution: Update to version 3.3.1 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-8902 BugTraq ID: 94311 http://www.securityfocus.com/bid/94311 http://seclists.org/fulldisclosure/2016/Nov/0 https://github.com/dotCMS/core/pull/8460/ https://github.com/dotCMS/core/pull/8468/ https://security.elarlang.eu/multiple-sql-injection-vulnerabilities-in-dotcms-8x-cve-full-disclosure.html Common Vulnerability Exposure (CVE) ID: CVE-2016-8903 Common Vulnerability Exposure (CVE) ID: CVE-2016-8904 Common Vulnerability Exposure (CVE) ID: CVE-2016-8905 Common Vulnerability Exposure (CVE) ID: CVE-2016-8906 Common Vulnerability Exposure (CVE) ID: CVE-2016-8907 Common Vulnerability Exposure (CVE) ID: CVE-2016-8908
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.