Sql injection

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cmstemplate.php. The manipulation of the argument tname/tpath leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0426

CVE-2024-0426 affects ForU CMS older releases (up to 2020-06-23) via SQL injection in admin/cms_template.php by manipulating t_name/t_path. The issue enables remote exploitation with HIGH impact on confidentiality, integrity, and availability; the exploit has been disclosed publicly. Connected so...