4 matches found
Sql injection
SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class...
7.5CVSS8.8AI score0.00983EPSS
SaveExploits1References1Affected Software1
CVE-2021-35437
CVE-2021-35437 affects LMXCMS v1.4 . The vulnerability is described as a SQL injection that allows an attacker to execute arbitrary code via the TagsAction.class . Multiple connected sources corroborate that the issue stems from insufficient validation of externally supplied SQL statements. The d...
9.8CVSS9.8AI score0.00983EPSS
SaveExploits1References1Affected Software1
20