Victor Cms Security Vulnerabilities and Issues — Victor Cms CVE List

Lucene search

Victor Cms ProjectVictor Cms

3 matches found

CVE•added 2020/07/07 9:15 p.m.•75 views

CVE-2020-15599

Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.

6.1CVSS5.9AI score0.00153EPSS

CVE•added 2020/12/02 10:15 p.m.•44 views

CVE-2020-29280

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.

9.8CVSS9.7AI score0.01466EPSS

CVE•added 2020/10/27 3:15 p.m.•27 views

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database.

7.5CVSS7.5AI score0.00264EPSS