NEWMARK NMCMS SQL Injection Vulnerability

NEWMARK a.k.a. New Mark NMCMS is a content management system for corporate websites from the Russian company NEWMARK. A SQL injection vulnerability exists in NEWMARK NMCMS version 2.1. A remote attacker can exploit the vulnerability by sending the 'sectid' parameter to the /catalog URI to execute...

PT-2018-11294

Name of the Vulnerable Software and Affected Versions NEWMARK aka New Mark NMCMS version 2.1 Description The issue allows SQL Injection via the sect id parameter to the "/catalog" URI. Recommendations For NEWMARK aka New Mark NMCMS version 2.1, avoid using the sect id parameter in the "/catalog"...