CVE-2025-22964

DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied...

CVE-2025-22964

creationtimestamp| type| source ---|---|--- 2025-01-15 22:41:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113834777778924900 2025-01-15 22:55:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1884 2025-01-15 23:16:00+00:00| seen|...

CVE-2025-22964

DDSN Interactive cm3 Acora CMS v10.1.1 is affected by an unauthenticated time-based blind SQL Injection in the table parameter due to insufficient input sanitization/validation. Impact includes unauthorized data access, data manipulation, and exposure of sensitive information. No public fix is do...

CVE-2025-22964

DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied...