2 matches found
CVE-2025-3800: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/controllers/AnonymousController.php. The manipulation of the argument mobilephone leads to sql injection. The attack can be launched remotely. The explo...
9.8CVSS7AI score0.00648EPSS
SaveExploits1References1
20