CVE-2018-14418

Summary: CVE-2018-14418 affects Msvod Cms v10 and is a SQL Injection vulnerability exploitable via the images/lists?cid= URI. The root cause is unsanitized input in the cid parameter, enabling arbitrary SQL commands. Public exploit content shows how payloads can retrieve database, user, and versi...

CVE-2021-41942

CVE-2021-41942 affects the Magic CMS MSVOD v10 video system. The connected documents consistently describe an SQL injection vulnerability in this product, enabling attackers to obtain sensitive information from the database. The sources do not provide exploitation details, affected subsystems bey...