CVE-2018-17410

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI...

CVE-2018-17410

Horus CMS is affected by a SQL Injection vulnerability. Public records cite an injection instance reachable via /busca and /home, implying remote exploitation without authentication. CVSS scores from NVD indicate high to critical impact (CVSS v2 base 7.5; CVSS v3.1 base 9.8). Concrete exploit det...