2 matches found
CVE-2020-28103
cscms v4.1 allows for SQL injection via the "pagedel" function...
CVE-2020-28103
CVE-2020-28103 affects cscms v4.1 and enables SQL injection through the page_del/page delete function. Root cause: improper input handling leading to SQL injection. CVSS 3.1 base score 9.8 (CRITICAL), NETWORK, no authentication, no user interaction. Exploitation details are not provided in the co...