8 matches found
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...
CVE-2024-44839
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...
CVE-2024-44839
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...
CVE-2024-44838
RapidCMS v1.3.1 is susceptible to a SQL injection vulnerability. The root cause is the improper neutralization of special elements used in an SQL command, specifically via the username parameter at the /resource/runlogin.php endpoint. This flaw could allow an attacker to interfere with backend da...
CVE-2024-44838
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...
CVE-2024-45771
RapidCMS v1.3.1 is vulnerable to a SQL injection flaw caused by improper neutralization of special elements in the password parameter at the /resource/runlogin.php API endpoint. This vulnerability allows for potential exploitation of the system. As a temporary workaround, it is recommended to res...
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...
CVE-2023-4446 OpenRapid RapidCMS category.php sql injection
A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associate...