CVE-2024-45265

CVE-2024-45265 建议描述 SkySystem Arfa-CMS 5.1.3132 之前版本的 poll 组件中存在 SQL 注入漏洞，允许远程攻击者通过 psid 参数执行任意 SQL 命令。 漏洞类型 CWE-89 | SQL 注入 产品厂商 SkySystem https://skyss.ru/ 受影响产品代码库 Arfa-CMS - 5.1.3124 及更早版本 权限提升影响 true 供应商是否已确认或承认该漏洞？ true 发现者 Kirill Kalimmulin 参考 https://skyss.ru...

CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter...

CVE-2024-45265

CVE-2024-45265 affects SkySystem Arfa-CMS before 5.1.3124. The vulnerability is a SQL injection in the poll component, exploitable via the psid parameter to allow remote attackers to execute arbitrary SQL commands. Root cause is improper handling of user-supplied psid data in the poll module, lea...

CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter...

SkySystem Arfa-CMS 安全漏洞

SkySystem Arfa-CMS is a content management system from SkySystem, Inc. A security vulnerability exists in SkySystem Arfa-CMS versions prior to 5.1.3124, which stems from a SQL injection vulnerability in the polling component that allows remote attackers to execute arbitrary SQL commands via the...