FlameCMS SQL Injection Vulnerability

FlameCMS is a PHP-based open source content management system CMS. A SQL injection vulnerability exists in FlameCMS version 3.3.5, which stems from the lack of effective filtering and escaping of parameters in the software's accountregister.php, resulting in a time-based SQL blind injection...

PT-2021-10543

Name of the Vulnerable Software and Affected Versions: FlameCMS version 3.3.5 Description: The issue is a SQL injection vulnerability. It is located in the /master/article.php endpoint via the Id parameter. Recommendations: For FlameCMS version 3.3.5, avoid using the Id parameter in the...

FlameCMS SQL Injection Vulnerability

FlameCMS is an open source PHP-based content management system CMS. A SQL injection vulnerability exists in FlameCMS version 3.3.5. An attacker can exploit this vulnerability to cause SQL injection with the help of the id parameter in masterarticle.php...

CVE-2020-20796: Improper Neutralization of Special Elements used in an SQL Command

FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter...

FlameCMS suffers from SQL injection vulnerability (CNVD-2019-37171)

FlameCMS Enterprise Station System is developed in PHP+MYSQL language. FlameCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain database information...

CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

Sql injection

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

CVE-2019-16309

FlameCMS 3.3.5 has an SQL injection in account/login.php via the accountName parameter. The root cause is a lack of input validation for SQL statements in a database-backed application, enabling an attacker to execute arbitrary SQL commands. This CVE (CVE-2019-16309) is corroborated by multiple s...

CVE-2019-16309: Improper Neutralization of Special Elements used in an SQL Command

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

PT-2019-14618

Name of the Vulnerable Software and Affected Versions FlameCMS version 3.3.5 Description The issue concerns SQL injection in the account/login.php file via the accountName variable. Recommendations For FlameCMS version 3.3.5, update to a version that fixes the SQL injection issue in...

SQL Injection Vulnerability in FlameCMS

FlameCMS lightweight modular front-end framework for developing fast, powerful web interfaces. FlameCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain database information...