CVE-2022-23358

EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement...

Sql injection

EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement...

CVE-2022-23358

CVE-2022-23358 affects EasyCMS v1.6. The vulnerability arises in ArticlemAction.class.php where user-supplied search terms are unsanitized and directly used to construct SQL, enabling a SQL injection. Multiple sources (NVD, Red Hat, OSV, CVE lists) describe this as a SQL-injection flaw with impac...

CVE-2022-23358

EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement...

CVE-2022-23358: Improper Neutralization of Special Elements used in an SQL Command

EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement...

PT-2022-15951

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.6 Description The issue allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement. Recommendations For...