CVE-2025-22964

DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied...

CVE-2025-22964

creationtimestamp| type| source ---|---|--- 2025-01-15 22:41:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113834777778924900 2025-01-15 22:55:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1884 2025-01-15 23:16:00+00:00| seen|...

CVE-2025-22964

DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied...

CVE-2025-22964

DDSN Interactive cm3 Acora CMS version 10.1.1 is vulnerable to an unauthenticated time-based blind SQL Injection . The root cause is insufficient input sanitization and validation of the "table" parameter, which allows attackers to inject malicious SQL queries directly into database queries witho...