EUVD-2021-33135

Malicious code in bioql PyPI...

CVE-2022-23873

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...

Sql injection

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...

CVE-2022-23873

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...

CVE-2022-23873

CVE-2022-23873 affects Victor CMS v1.0, where a SQL injection vulnerability exists in the 'user_firstname' parameter. Multiple connected sources (NVD entry, Red Hat advisory, CNVD/CNNVD variants) describe lack of input validation allowing an attacker to inject SQL commands, potentially impacting ...

Cross site scripting

Victor CMS 1.0 has Persistent XSS in admin/users.php?source=adduser via the username, userfirstname, or userlastname parameter...