Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2022/06/16 6:26 p.m.•40 views

CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...

9.1AI score0.01517EPSS
SaveExploits1References3
Mend
Mend
•added 2022/06/16 6:26 p.m.•4 views

CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...

8.8CVSS0.01517EPSS
SaveExploits1References3
CVE
CVE
•added 2022/06/16 6:26 p.m.•78 views

CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via parameters c_id (admin_edit_comment.php), p_id (admin_edit_post.php), u_id (admin_edit_user.php), and edit (admin_update_categories.php). Root cause: unsafeguarded parameter handling in the CMS allows crafted input to alter SQL queries. Impact, pe...

8.8CVSS9AI score0.01517EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/16 12:00 a.m.•5 views

CVE-2020-35597: Improper Neutralization of Special Elements used in an SQL Command

Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...

8.8CVSS7.9AI score0.01517EPSS
SaveExploits1References2
Rows per page
Query Builder