3 matches found
CVE-2020-18746
SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diylist.php"...
7.2CVSS6.1AI score0.01798EPSS
SaveExploits1References1
CVE-2020-18746: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diylist.php"...
7.2CVSS6.5AI score0.01798EPSS
SaveExploits1References2
PT-2021-10233
Name of the Vulnerable Software and Affected Versions: AiteCMS version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the component "aitecms/login/diy list.php". This is a SQL Injection issue, which can be exploited by attackers to execute arbitrary code...
7.2CVSS0.01798EPSS
SaveExploits1References5
20