CVE-2020-23966 - SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request

Back Back to CVE browser

CRITICAL

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request

Published May 8, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.84%

Description

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16702
Advisory
https://github.com/VictorAlagwu/CMSsite/
Product
https://github.com/VictorAlagwu/CMSsite/issues/15
ExploitIssue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16702		Advisory
https://github.com/VictorAlagwu/CMSsite/		Product
https://github.com/VictorAlagwu/CMSsite/issues/15		ExploitIssue Tracking