Sql injection

SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...

CVE-2021-3264

SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...

PT-2021-19824

Name of the Vulnerable Software and Affected Versions cxuucms version 3.1 Description The issue is related to a SQL Injection vulnerability. It affects the pid parameter in the "public/admin.php" endpoint. There is no information provided about the estimated number of potentially affected devices...

CVE-2021-3264: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...

CVE-2020-29250: Improper Neutralization of Input During Web Page Generation

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

PT-2020-17124

Name of the Vulnerable Software and Affected Versions CXUUCMS version V3 Description The issue allows for XSS via the first and third input fields to "/public/admin.php". This means an attacker can inject malicious scripts into the website, potentially stealing user data or taking control of the...