CVE-2017-18194

HamayeshNegar CMS is affected in its signup component (users/signup.php). The vulnerability is a SQL injection caused by the utype parameter, allowing a remote attacker to execute arbitrary SQL commands. The exploitation details are not provided in the documents; no patch or remediation steps are...

CVE-2017-18194: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter...

PT-2018-6725

Name of the Vulnerable Software and Affected Versions: HamayeshNegar CMS affected versions not specified Description: A SQL injection issue exists in the "signup" component of HamayeshNegar CMS, specifically in the users/signup.php file. This allows a remote attacker to execute arbitrary SQL...