CVE-2020-15540

CVE-2020-15540 affects We-COM OpenData CMS 2.0 and is caused by a lack of validation of externally entered SQL statements in the database backend, enabling SQL injection via the administrator username field. Reported technical details in connected sources confirm the vulnerability enables arbitra...

We-Com OpenData CMS 2.0 SQL Injection

Exploit Title: We-com OpenData CMS 2.0 Authentication Bypass / SQL Injection Google Dork:N/A Date: 2020-04-17 Exploit Author: @ThelastVvV Vendor Homepage: https://www.we-com.it/ Version: 2.0 Tested on: 5.5.0-kali1-amd64 --------------------------------------------------------- Vendor contact...

We-Com Municipality Portal CMS 2.1.x Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: We-com Municipality portal CMS SQL Injection & XSS Vulnerability Exploit Author: @ThelastVvV Vendor Homepage: https://www.we-com.it/ Version: 2.1.x Tested on: 5.5.0-kali1-amd64...

We-Com Municipality Portal CMS 2.1.x Cross Site Scripting / SQL Injection

Exploit Title: We-com Municipality portal CMS SQL Injection & XSS Vulnerability Google Dork:N/A Date: 2020-04-17 Exploit Author: @ThelastVvV Vendor Homepage: https://www.we-com.it/ Version: 2.1.x Tested on: 5.5.0-kali1-amd64 --------------------------------------------------------- Vendor contact...