CVE-2020-29280 - The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page

CRITICAL

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page

Published Dec 2, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.90%

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21655		Advisory
https://github.com/BigTiger2020/Victor-CMS-/blob/main/README.md		x_refsource_MISCThird Party Advisory
https://github.com/VictorAlagwu/CMSsite/issues/13		x_refsource_MISCThird Party Advisory
https://www.exploit-db.com/exploits/48734		x_refsource_MISCThird Party AdvisoryVDB Entry