CVE-2016-8906

SQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.

• CWE-89

• http://seclists.org/fulldisclosure/2016/Nov/0Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/94311Third Party Advisory, VDB Entry
• https://github.com/dotCMS/core/pull/8460/Patch, Vendor Advisory
• https://github.com/dotCMS/core/pull/8468/Patch, Vendor Advisory
• https://security.elarlang.eu/multiple-sql-injection-vulnerabilities-in-dotcms-8x-cve-full-disclosure.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2016/Nov/0Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/94311Third Party Advisory, VDB Entry
• https://github.com/dotCMS/core/pull/8460/Patch, Vendor Advisory
• https://github.com/dotCMS/core/pull/8468/Patch, Vendor Advisory
• https://security.elarlang.eu/multiple-sql-injection-vulnerabilities-in-dotcms-8x-cve-full-disclosure.htmlExploit, Third Party Advisory

Published

Nov 14, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8900Exponent CMS version 2.3.9 suffers from a Object Injection v…
• CVE-2016-8901b2evolution 6.7.6 suffer from an Object Injection vulnerabil…
• CVE-2016-8902SQL injection vulnerability in the categoriesServlet servlet…
• CVE-2016-8903SQL injection vulnerability in the "Site Browser > Templates…
• CVE-2016-8904SQL injection vulnerability in the "Site Browser > Container…
• CVE-2016-8905SQL injection vulnerability in the JSONTags servlet in dotCM…
• CVE-2016-8907SQL injection vulnerability in the "Content Types > Content …
• CVE-2016-8908SQL injection vulnerability in the "Site Browser > HTML page…
• CVE-2016-8909The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU …6
• CVE-2016-8910The rtl8139_cplus_transmit function in hw/net/rtl8139.c in Q…6
• CVE-2016-8911IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a…
• CVE-2016-8912IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potent…