CVE-2018-19461

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php...

CVE-2018-19461

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php...

CVE-2018-19461

CVE-2018-19461 affects EmpireCMS (through 7.5 and earlier). A cross-site scripting flaw exists in admin\db\DoSql.php that can be triggered via crafted SQL syntax to admin/admin.php. Affected component is the DoSql.php path; root cause involves improper handling of SQL in that file leading to stor...