CVE-2019-25366

The CVE-2019-25366 issue affects microASP Portal+ CMS, where an SQL injection vulnerability exists in the explode_tree parameter. An unauthenticated attacker can send crafted requests to pagina.phtml to execute arbitrary SQL queries, using payloads with functions like extractvalue and concat to e...

microASP Portal+ CMS SQL注入漏洞

microASP Portal+ CMS is a smart content management system developed by microASP Corporation. The microASP Portal+ CMS has a SQL injection vulnerability. This vulnerability arises because unauthenticated attackers can inject malicious code into the explodetree parameter to execute arbitrary SQL...

CVE-2019-25366: Improper Neutralization of Special Elements used in an SQL Command

microASP Portal+ CMS contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the explodetree parameter. Attackers can send crafted requests to pagina.phtml with SQL injection payloads using extractvalue and...