Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57764
HistoryJun 09, 2022 - 12:00 a.m.

Elitecms SQL Injection Vulnerability (CNVD-2022-57764)

2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.002 Low

EPSS

Percentile

54.6%

Elitecms is a web content management by elitecms India. elitecms version 1.01 has a SQL injection vulnerability, which originates from the /admin/edit_sidebar.php page page parameter lack of validation of external input SQL statements, an attacker can use this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
elitecms elitecmseq1.01

0.002 Low

EPSS

Percentile

54.6%

Related for CNVD-2022-57764