CVE-2013-3727: SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arb...

Security readout for executives and security teams

CVE-2013-3727 is a SQL injection issue in Kasseler CMS before version 2 r1232. An authenticated administrator-facing request could let an attacker run arbitrary database commands. The CVE notes it may also be abused through CSRF, increasing risk when an administrator is logged in. Exposure is likely limited to organizations still running Kasseler CMS before 2 r1232, especially where admin.php is internet-reachable or administrators access the CMS from untrusted browsing contexts. Prioritize remediation if Kasseler CMS is still in use. The business risk is database compromise, including content tampering, account changes, or data exposure. If the CMS is retired or not present, no action beyond documentation is needed. Mitigation focus: Upgrade Kasseler CMS to 2 r1232 or later using vendor guidance.; Review the vendor r1232 patch information before applying changes.; Restrict access to admin.php to trusted administrators and networks..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.