Описание
Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.3 (включая)
cpe:2.3:a:conceptintermedia:s\@m_cms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00308
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-89
CWE-89
EPSS
Процентиль: 54%
0.00308
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-89
CWE-89