CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

Sql injection

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

CVE-2019-16309

FlameCMS 3.3.5 has an SQL injection in account/login.php via the accountName parameter. The root cause is a lack of input validation for SQL statements in a database-backed application, enabling an attacker to execute arbitrary SQL commands. This CVE (CVE-2019-16309) is corroborated by multiple s...

SQL Injection Vulnerability in FlameCMS

FlameCMS lightweight modular front-end framework for developing fast, powerful web interfaces. FlameCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain database information...