3 matches found
Sql injection
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...
7.5CVSS9AI score0.03671EPSS
SaveExploits5References4Affected Software1
PT-2020-7896
Name of the Vulnerable Software and Affected Versions: Yeager CMS version 1.2.1 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the passwordreset&token parameter. Recommendations: For Yeager CMS version 1.2.1, avoid using the passwordreset&token...
9.8CVSS0.03671EPSS
SaveExploits5References5
CVE-2015-7567: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...
9.8CVSS8.6AI score0.03671EPSS
SaveExploits5References2
20