EUVD-2019-7900

Malware in sbrugna...

CVE-2019-17552: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spiderproject.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload...

PT-2019-15202

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.14 Description An issue was discovered in the 'upload spider project scheme' feature, where a SQL injection vulnerability exists via a two-dimensional payload in the spider project.admincp.php file. Recommendations...