56 matches found
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
Sql injection
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
CVE-2022-24223
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
CVE-2022-24223
AtomCMS v2.0 is affected by a SQL injection in /admin/login.php (CWE-89). The Nuclei template confirms the vulnerability and notes a remediation: fixed in Atom CMS v2.1. Exploitation exists (PoC and Exploit DB variant) demonstrating arbitrary SQL execution and potential data compromise. The CVE e...
PT-2022-16546
Name of the Vulnerable Software and Affected Versions AtomCMS version 2.0 Description A SQL injection issue was discovered in AtomCMS via the /admin/login.php endpoint. This allows for potential exploitation. Recommendations For AtomCMS version 2.0, consider disabling access to the /admin/login.p...
CVE-2022-24223: Improper Neutralization of Special Elements used in an SQL Command
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
Digital Craft AtomCMS Arbitrary File Upload and SQL Injection Vulnerabilities
Digital Craft AtomCMS is prone to file upload and sql injection vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4852
SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2014-4852
CVE-2014-4852 describes an SQL injection in The Digital Craft AtomCMS, in the file admin/uploads.php (likely around version 2.0). The vulnerability allows remote attackers to manipulate the database by supplying an arbitrary SQL command via the id parameter, as documented in multiple feeds (NVD, ...
CVE-2014-4852
SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2014-4852: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/uploads.php in The Digital Craft AtomCMS, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2014-6166
Name of the Vulnerable Software and Affected Versions The Digital Craft AtomCMS version 2.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the admin/uploads.php file. Recommendations For version 2.0, update the admin/uploads.php...
AtomCMS - SQL Injection Arbitrary File Upload
AtomCMS - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/68437/info AtomCMS is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability. Exploiting these issues could allow an attacker to upload arbitrary files, compromise the application,...
AtomCMS - SQL Injection / Arbitrary File Upload
source: https://www.securityfocus.com/bid/68437/info AtomCMS is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability. Exploiting these issues could allow an attacker to upload arbitrary files, compromise the application, access or modify data, or exploit latent...