CVE-2019-11452

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

Sql injection

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

CVE-2019-11452

Whatsns 4.0 is affected by a SQL injection in the admin workflow: index.php?admin_category/remove.html cid[]. The Cy description in connected Red Hat EU and NVD entries confirms that the vulnerability stems from handling of the cid[] parameter, enabling SQL injection. The records do not provide s...