CVE-2019-10653: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...

PT-2019-11966

Name of the Vulnerable Software and Affected Versions Hsycms version 1.1 Description A SQL injection issue was found, which can be exploited via the "/news/.html" API endpoint. Recommendations For Hsycms version 1.1, at the moment, there is no information about a newer version that contains a fix...