CVE-2022-25488: Improper Neutralization of Special Elements used in an SQL Command

Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...

PT-2022-17323

Name of the Vulnerable Software and Affected Versions Atom CMS version 2.0 Description A SQL injection issue was discovered in Atom CMS via the id parameter in the "/admin/ajax/avatar.php" API endpoint. This allows for potential exploitation. Recommendations For Atom CMS version 2.0, as a tempora...