7 matches found
EUVD-2018-6335
Malware in sbrugna...
CVE-2018-14418
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI...
Sql injection
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI...
CVE-2018-14418
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI...
CVE-2018-14418
Summary: CVE-2018-14418 affects Msvod Cms v10 and is a SQL Injection vulnerability exploitable via the images/lists?cid= URI. The root cause is unsanitized input in the cid parameter, enabling arbitrary SQL commands. Public exploit content shows how payloads can retrieve database, user, and versi...
PT-2018-12499
Name of the Vulnerable Software and Affected Versions Msvod Cms version 10 Description The issue exists due to SQL Injection via an images/lists?cid= URI. Recommendations For Msvod Cms version 10, avoid using the cid parameter in the images/lists endpoint until the issue is resolved...