CVE-2025-3799

A vulnerability, which was classified as critical, was found in WCMS 11. Affected is an unknown function of the file app/controllers/AnonymousController.php. The manipulation of the argument email/username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3799

A vulnerability, which was classified as critical, was found in WCMS 11. Affected is an unknown function of the file app/controllers/AnonymousController.php. The manipulation of the argument email/username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3799

creationtimestamp| type| source ---|---|--- 2025-04-19 11:02:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12580 2025-04-19 12:39:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln65qefr2d2g 2025-04-19 13:30:16+00:00| published-proof-of-concept|...

CVE-2025-3799 WCMS AnonymousController.php sql injection

A vulnerability, which was classified as critical, was found in WCMS 11. Affected is an unknown function of the file app/controllers/AnonymousController.php. The manipulation of the argument email/username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3799

CVE-2025-3799 affects WCMS 11, specifically an unknown function in file app/controllers/AnonymousController.php . The vulnerability is a SQL injection triggered by modifying the parameters email/username , exploitable remotely. Public disclosure and multiple CVE feeds corroborate remote attack po...