EUVD-2020-12976

Malware in sbrugna...

CVE-2020-20189

CVE-2020-20189 is a SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. The affected component is NewPK 1.1 and the root cause is improper input handling in the title field, enabling SQL statements to be executed against the database. CVSS scores on the entry ar...

CVE-2020-20189: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php...