Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8frf-c859-r46q

Опубликовано: 01 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters.

Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters.

EPSS

Процентиль: 50%
0.00264
Низкий

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
около 4 лет назад

Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters.

EPSS

Процентиль: 50%
0.00264
Низкий

Дефекты

CWE-89