EUVD-2020-13083

Malware in sbrugna...

EUVD-2020-13082

Malware in sbrugna...

CmsWing Project SQL Injection (CVE-2020-20296)

An SQL injection vulnerability exists in CmsWing Project. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-20294

An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands...

Command injection

An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands...