CVE-2023-5264

CVE-2023-5264 affects huakecms 3.0, where the cid parameter in /admin/cms_content.php enables SQL injection via an unknown functionality. The vulnerability is exploitable remotely and has publicly disclosed PoC/exploit references; multiple sources label the impact as high/critical (confidentialit...

CVE-2023-5264 huakecms cms_content.php sql injection

A vulnerability classified as critical was found in huakecms 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/cmscontent.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...