CVE-2026-3785: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAction.class.php of the component Request Parameter Handler. The manipulation of the argument order leads to sql injection. The attack can be initiated remotely. The exploit is...

CVE-2026-3786: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handler. The manipulation of the argument order results in sql injection. The attack can be launched remotely. The exploit...

CVE-2026-1105: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of the argument order leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was...

[email protected] CMS 2.0 (_order) SQL Injection / Cross Site Scripting Vulnerability

Exploit for php platform in category web applications email protected CMS 2.0 order SQL Injection Vulnerability Vendor: email protected Product web page: http://www.webatall.org Affected version: 2.0 Summary: email protected is a PHP content management system CMS. If you know about it,you nearly...