TI-2011-00909 CVE-2011-1055 · GHSA-8c5q-q8rm-6hhrSQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote…Priority LOW 35SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.user_id parameter to media.cfm.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01151 · Published 2011-02-21 · No fix listed CWE-89
