86 matches found
Sql injection
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...
CVE-2020-28091
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...
CVE-2020-28091
CVE-2020-28091 affects cxuucms v3; a SQL injection flaw in search.php via the keywords parameter allows leakage of all database data. Root cause: unsanitized input in the search mechanism leads to unparameterized SQL. Impact: potential full data exposure. Exploitation details are documented in pu...
Cxuucms SQL注入漏洞
Cxuucms is a PHP-based content relationship building system. cxuucms v3 suffers from a SQL injection vulnerability that originates from leaking all database data via search.php via the keyword parameter. No detailed vulnerability details are available at this time...
PT-2020-16922
Name of the Vulnerable Software and Affected Versions cxuucms version 3 Description The issue is related to a SQL injection vulnerability. This vulnerability can lead to the leakage of all database data via the keywords parameter in the "search.php" endpoint. Recommendations For cxuucms version 3...
CVE-2020-28091: Improper Neutralization of Special Elements used in an SQL Command
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...