Lucene search
+L

4 matches found

NVD
NVD
•added 2024/04/04 11:15 p.m.•51 views

CVE-2024-31212

InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability exists in indexchartdata action, which receive...

7.2CVSS6.8AI score0.00854EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/04/04 11:02 p.m.•20 views

CVE-2024-31212 SQL injection in index_chart_data action

InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability exists in indexchartdata action, which receive...

6.7CVSS8.3AI score0.00854EPSS
SaveExploits1References4
Mend
Mend
•added 2024/04/04 11:02 p.m.•3 views

CVE-2024-31212

InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability exists in indexchartdata action, which receive...

8.6CVSS0.00854EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/04 12:00 a.m.•5 views

CVE-2024-31212: Improper Neutralization of Special Elements used in an SQL Command

InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability exists in indexchartdata action, which receive...

7.2CVSS6.3AI score0.00854EPSS
SaveExploits1References4
Rows per page
Query Builder