FKIE_CVE-2013-3523

Vulnerability from fkie_nvd - Published: 2013-05-10 21:55 - Updated: 2026-06-16 23:55
Severity
Summary
SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page&id= in the URL.
References
cve@mitre.orghttp://freecode.com/projects/this/releases/353516
cve@mitre.orghttp://osvdb.org/91976
cve@mitre.orghttp://xforce.iss.net/xforce/xfdb/84168
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/84168
af854a3a-2127-422b-91ae-364da2661108http://freecode.com/projects/this/releases/353516
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/91976
af854a3a-2127-422b-91ae-364da2661108http://xforce.iss.net/xforce/xfdb/84168
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/84168
Impacted products
Vendor Product Version
gajennings this *
gajennings this 1.0.1
gajennings this 1.0.2
gajennings this 1.0.3
gajennings this 1.0.4
gajennings this 1.0.5
gajennings this 1.0.6
gajennings this 1.1.0
gajennings this 1.1.1
gajennings this 1.1.2
gajennings this 1.1.3
gajennings this 1.1.4
gajennings this 1.1.5
gajennings this 1.1.6
gajennings this 1.1.7
gajennings this 1.1.8
gajennings this 1.2.0
gajennings this 1.2.1
gajennings this 1.2.2
gajennings this 1.2.3
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gajennings:this:*:a:*:*:*:*:*:*",
              "matchCriteriaId": "E6999F7D-DB7F-4400-8AAC-703C835F03D0",
              "versionEndIncluding": "1.2.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A58B02A3-0FDC-446E-89A5-D5224B1C560B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "95BD9400-858D-478D-8459-8E9C40AD9812",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DB79424-50CA-4C43-9756-B0173CB7A2B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEA36F9F-2657-4C19-BCEB-7EF513A846A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7D6D64D-BDB7-4A74-9128-6B24B909E5A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "44AD23C4-3B84-4612-B4F9-C65A2C58BBCB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC873EF9-01DB-4909-9631-5C389A99248D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "82770F02-C6F9-419E-BBF4-66FA3589A847",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "84C8D6D5-2FD6-4B03-B6F6-B5F3A2F6662F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A723610-BE89-4DC9-80A3-3A321D52AD13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "B734C790-0F22-43C0-934D-350C30327524",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "642FE0E4-070A-497B-B333-3A3962D1B294",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0F58EAB-CA66-423D-997E-D841EBE714FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CE19C5A-A008-48BD-BAF6-91C855DA6794",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B9FE67C-9F83-42D5-8950-25FDD1CE493A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B11D0FB-22C8-46EE-BD7F-C0EB6487D6D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DE3BFBF-C99A-4FB3-BFBF-1698E7E435CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA9F302D-ABED-40ED-B8E6-50C493FDD2F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gajennings:this:1.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "55A2D453-8362-43BC-9240-6BBACF8A1C6A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page\u0026id= in the URL."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de inyecci\u00f3n SQL en This HTML Is Simple (THIS) antes de la versi\u00f3n 1.2.4 permite la ejecuci\u00f3n remota de comandos SQL arbitrarios a trav\u00e9s de vectores relacionados con op=page\u0026amp;id= en la URL."
    }
  ],
  "id": "CVE-2013-3523",
  "lastModified": "2026-06-16T23:55:20.173",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-05-10T21:55:02.260",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://freecode.com/projects/this/releases/353516"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/91976"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://xforce.iss.net/xforce/xfdb/84168"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84168"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://freecode.com/projects/this/releases/353516"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/91976"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://xforce.iss.net/xforce/xfdb/84168"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84168"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.