2 matches found
CVE-2022-26613
CVE-2022-26613 affects PHP-CMS v1.0, with a SQL injection vulnerability in the category parameter of categorymenu.php. The connected documents consistently describe a PHP/MySQL-based PHPCMS v1.0 vulnerability due to unsanitized input in the category parameter, enabling SQL injection. The NVD entr...
CVE-2020-18263
CVE-2020-18263 affects PHP-CMS v1.0, with a SQL injection in the search.php component via the search parameter. This allows attackers to access sensitive database information. Root cause: input from the search parameter is not properly sanitized/validated. Impact is exposure of data; no exploitat...