4 matches found
CVE-2020-35597
Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...
CVE-2020-35597
Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...
CVE-2020-35597
Victor CMS 1.0 is vulnerable to SQL injection via parameters c_id (admin_edit_comment.php), p_id (admin_edit_post.php), u_id (admin_edit_user.php), and edit (admin_update_categories.php). Root cause: unsafeguarded parameter handling in the CMS allows crafted input to alter SQL queries. Impact, pe...
CVE-2020-35597: Improper Neutralization of Special Elements used in an SQL Command
Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...