5 matches found
CVE-2022-30814
elitecms v1.01 is vulnerable to SQL Injection via /admin/addsidebar.php...
Sql injection
elitecms v1.01 is vulnerable to SQL Injection via /admin/addsidebar.php...
CVE-2022-30814
CVE-2022-30814 affects elitecms v1.01 and is a SQL Injection vulnerability in /admin/add_sidebar.php caused by lack of input validation. Public sources describe attackers possibly stealing sensitive database data by exploiting SQL statements derived from user input. CVSS metrics in the initial en...
Sql injection
An issue was discovered in Elite CMS Pro 2.01. In /admin/addsidebar.php, the ?page= parameter is vulnerable to SQL injection...
CVE-2018-12250
Summary of vulnerability (CVE-2018-12250) : Multiple sources confirm a SQL injection flaw in Elite CMS Pro 2.01, specifically in the /admin/add_sidebar.php file via the vulnerable ?page= parameter. The issue is described as allowing the execution of arbitrary SQL commands, with the potential for ...