CVE-2024-10291

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function EbakDoExecSQL/EbakDotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2023-50162

SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function...

CVE-2023-50162

SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function...

EmpireCMS SQL Injection Vulnerability

EmpireCMS Empire Content Management System is an open source content management system CMS. EmpireCMS v7.5 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. A remote attacker can exploit this vulnerability to...

CVE-2023-50162

SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function...

CVE-2023-50162: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function...

PT-2024-13871

Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.5 Description The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function. This is a SQL injection vulnerability. Recommendations For EmpireCMS version 7.5, consid...