SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/.
| Software | From | Fixed in |
|---|---|---|
| apprain / apprain | 3.0.1 | 3.0.1.x |
| apprain / apprain | 0.1.1 | 0.1.1.x |
| apprain / apprain | 0.1.5 | 0.1.5.x |
| apprain / apprain | 0.1.2 | 0.1.2.x |
| apprain / apprain | 0.1.0 | 0.1.0.x |
| apprain / apprain | - | 3.0.2.x |
| apprain / apprain | 0.1.3 | 0.1.3.x |
| apprain / apprain | 0.2.1.1 | 0.2.1.1.x |
| apprain / apprain | 0.1.4 | 0.1.4.x |