CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...

CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via parameters c_id (admin_edit_comment.php), p_id (admin_edit_post.php), u_id (admin_edit_user.php), and edit (admin_update_categories.php). Root cause: unsafeguarded parameter handling in the CMS allows crafted input to alter SQL queries. Impact, pe...