3 matches found
CVE-2022-30816
elitecms 1.01 is vulnerable to SQL Injection via /admin/editsidebar.php...
CVE-2022-30815
Elitecms 1.01 is vulnerable to SQL injection via admin/edit_sidebar.php?page=2&sidebar due to lack of input validation on the sidebar parameter. This can allow attackers to execute arbitrary SQL and access sensitive data. No published fix is provided in the connected documents; remediation status...
CVE-2022-30816
CVE-2022-30816 affects elitecms 1.01 and is a SQL Injection vulnerability exploitable via the /admin/edit_sidebar.php page. The root cause is lack of validation of the external input SQL statements in the page parameter, enabling an attacker to execute arbitrary SQL commands to steal sensitive da...