CVE-2023-50162

SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function...

CVE-2023-50162

creationtimestamp| type| source ---|---|--- 2024-01-09 01:26:30+00:00| seen| https://t.me/ctinow/164735 2024-01-26 07:36:51+00:00| seen| https://t.me/ctinow/174026...

CVE-2023-50162

EmpireCMS v7.5 is affected by CVE-2023-50162 due to a SQL injection in the DoExecSql function. The vulnerability allows remote attackers to run arbitrary SQL, potentially leading to code execution and exposure of sensitive data. Root cause: lack of validation of externally supplied SQL statements...

CVE-2023-50162

SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function...