CVE-2023-50073

creationtimestamp| type| source ---|---|--- 2023-12-18 23:17:52+00:00| seen| https://t.me/ctinow/156184...

CVE-2023-50073

EmpireCMS v7.5 contains a SQL injection vulnerability exposed by the ftppassword parameter in SetEnews.php. The root cause is lack of validation/external input handling for ftppassword, enabling malicious SQL statements and potential unauthorized data access. Several connected records confirm the...