CVE-2017-14600

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $GET'delblack', resulting in Information Disclosure...

PT-2017-13572

Name of the Vulnerable Software and Affected Versions Pragyan CMS version 3.0 Description The issue concerns an Error-Based SQL injection, which can lead to Information Disclosure. This occurs in the cms/admin.lib.php file via the del black variable in the $ GET request. Recommendations For Pragy...

PT-2017-13573

Name of the Vulnerable Software and Affected Versions Pragyan CMS version 3.0 Description The issue is related to a Boolean-based SQL injection, which can lead to Information Disclosure. This occurs in the cms/admin.lib.php file via the forwhat variable in the $ GET request. Recommendations For...

CVE-2017-14600: Improper Neutralization of Special Elements used in an SQL Command

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $GET'delblack', resulting in Information Disclosure...

CVE-2017-14601: Improper Neutralization of Special Elements used in an SQL Command

Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $GET'forwhat', resulting in Information Disclosure...