CVE-2020-15540

CVE-2020-15540 affects We-COM OpenData CMS 2.0 and is caused by a lack of validation of externally entered SQL statements in the database backend, enabling SQL injection via the administrator username field. Reported technical details in connected sources confirm the vulnerability enables arbitra...

PT-2020-14489

Name of the Vulnerable Software and Affected Versions We-com Municipality portal CMS versions 2.1.x Description SQL injection can occur via the cerca/ keywords field. This issue allows for potential data manipulation and unauthorized access. Recommendations For We-com Municipality portal CMS...

CVE-2020-15540: Improper Neutralization of Special Elements used in an SQL Command

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...

PT-2020-14488

Name of the Vulnerable Software and Affected Versions We-com Municipality portal CMS versions 2.1.x Description The issue allows for XSS to occur via the cerca/search bar. Recommendations For We-com Municipality portal CMS versions 2.1.x, consider restricting access to the cerca/search bar until ...

PT-2020-14490

Name of the Vulnerable Software and Affected Versions We-com OpenData CMS version 2.0 Description The issue allows SQL Injection via the username field on the administrator login page. This could potentially lead to unauthorized access to sensitive data. Recommendations For We-com OpenData CMS...

CVE-2020-15539: Improper Neutralization of Special Elements used in an SQL Command

SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...

CVE-2020-15538: Improper Neutralization of Input During Web Page Generation

XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...

We-Com OpenData CMS 2.0 SQL Injection

Exploit Title: We-com OpenData CMS 2.0 Authentication Bypass / SQL Injection Google Dork:N/A Date: 2020-04-17 Exploit Author: @ThelastVvV Vendor Homepage: https://www.we-com.it/ Version: 2.0 Tested on: 5.5.0-kali1-amd64 --------------------------------------------------------- Vendor contact...

We-Com Municipality Portal CMS 2.1.x Cross Site Scripting / SQL Injection

Exploit Title: We-com Municipality portal CMS SQL Injection & XSS Vulnerability Google Dork:N/A Date: 2020-04-17 Exploit Author: @ThelastVvV Vendor Homepage: https://www.we-com.it/ Version: 2.1.x Tested on: 5.5.0-kali1-amd64 --------------------------------------------------------- Vendor contact...

We-Com Municipality Portal CMS 2.1.x Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: We-com Municipality portal CMS SQL Injection & XSS Vulnerability Exploit Author: @ThelastVvV Vendor Homepage: https://www.we-com.it/ Version: 2.1.x Tested on: 5.5.0-kali1-amd64...