CVE-2020-36543

CVE-2020-36543 affects SialWeb CMS. Publicly disclosed SQL injection in an unknown portion of /about.php triggered by manipulating the Id parameter. Exploitation is possible remotely; multiple sources note that an exploit has been disclosed. No product/version details or remediation are provided ...

CVE-2020-36544

SialWeb CMS has a Cross‑Site Scripting vulnerability in the Search Handler component. The documents identify a remote, user‑input related XSS described as exploitable with publicly disclosed details, affecting unknown code paths in SialWeb CMS. No concrete remediation steps or fixed version are s...