Sql injection

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

CVE-2018-12630

CVE-2018-12630 affects NEWMARK NMCMS 2.1. The issue is a SQL Injection in the sect_id parameter of the /catalog URI, allowing an attacker to execute arbitrary SQL commands. Impact is high/critical (CVSS3 base 9.8; no auth, network access, no user interaction). Root cause: improper handling of use...

NewMark CMS 2.1 SQL Injection

Exploit Title: NewMark CMS 2.1 - SQL Injection secid Google Dork: /catalog/?sectid= Date: 2018-06-20 Exploit Author: Berk Dusunur Vendor Homepage: https://nmark.ru/ Software Link: https://nmark.ru/razrabotka/korporativniy-sayt/ Version: v2.1 Tested on: Pardus CVE : N/A Prof Of Consept sec id...