Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m6xq-wg6p-prq3

Опубликовано: 20 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection.

Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.

EPSS

Процентиль: 43%
0.00531
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-89

Связанные уязвимости

nvd
около 2 месяцев назад

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.

EPSS

Процентиль: 43%
0.00531
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-89