CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

24 matches found

Prion•added 2021/02/01 6:15 p.m.•32 views

Sql injection

An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands...

7.5CVSS9.8AI score0.01355EPSS

SaveExploits1References1Affected Software1

Mend•added 2021/02/01 5:38 p.m.•1 views

CVE-2020-20295

An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands...

9.8CVSS0.01355EPSS

SaveExploits1References1

Positive Technologies•added 2021/02/01 12:00 a.m.•3 views

PT-2021-10475

Name of the Vulnerable Software and Affected Versions: CMSWing version 1.3.8 Description: An issue was found in the CMSWing project where the updateAction function does not check the detail parameter, allowing malicious parameters to execute arbitrary SQL commands. Recommendations: For CMSWing...

9.8CVSS0.01355EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2021/02/01 12:00 a.m.•5 views

CVE-2020-20295: Improper Neutralization of Special Elements used in an SQL Command

An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands...

9.8CVSS6.1AI score0.01355EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by