Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
9.8CVSS
9.9AI Score
0.001EPSS
user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
9.8CVSS
9.9AI Score
0.001EPSS
Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.
4.8CVSS
4.9AI Score
0.001EPSS
Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.
4.8CVSS
4.9AI Score
0.001EPSS