Sql injection

SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl...

CVE-2020-20914

CVE-2020-20914 affects San Luan PublicCMS v4.0. The issue is a SQL Injection via the sql parameter that can lead to remote code execution. Documents show a high-impact, CRITICAL vulnerability (CVSS 3.1: 9.8) with network attack vector and no user interaction required. Exploitation details or live...