CVE-2024-45265

CVE-2024-45265 Descripción sugerida Una vulnerabilidad de inyección SQL en el componente de encuestas en SkySystem Arfa-CMS anterior a 5.1.3132 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro psid. Tipo de vulnerabilidad CWE-89 | Inyección SQL Proveedor del...

CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter...

CVE-2024-45265

CVE-2024-45265 affects SkySystem Arfa-CMS before 5.1.3124. The vulnerability is a SQL injection in the poll component, exploitable via the psid parameter to allow remote attackers to execute arbitrary SQL commands. Root cause is improper handling of user-supplied psid data in the poll module, lea...

CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter...

SkySystem Arfa-CMS 安全漏洞

SkySystem Arfa-CMS is a content management system from SkySystem, Inc. A security vulnerability exists in SkySystem Arfa-CMS versions prior to 5.1.3124, which stems from a SQL injection vulnerability in the polling component that allows remote attackers to execute arbitrary SQL commands via the...