CVE-2017-14600: Improper Neutralization of Special Elements used in an SQL Command

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $GET'delblack', resulting in Information Disclosure...

CVE-2017-14601: Improper Neutralization of Special Elements used in an SQL Command

Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $GET'forwhat', resulting in Information Disclosure...

Pragyan CMS 3.0 Beta Cross Site Request Forgery / Cross Site Scripting

================================== Vulnerability ID: HTB22855 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinpragyancms.html Product: Pragyan CMS Vendor: Pragyan Team http://sourceforge.net/projects/pragyan/ Vulnerable Version: v.3.0 beta Vendor Notification: 17 February 2011 Vulnerability...