CVE-2023-39378 SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' by an unauthenticated user...

CVE-2023-39378

SiberianCMS is affected by CVE-2023-39378: an SQL Injection vulnerability (CWE-89) that can be exploited by an unauthenticated attacker over the network. The root cause is improper neutralization of special elements in SQL commands within SiberianCMS components; this yields potentially high impac...