Security Advisory

CVE-2019-25538

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-12 15:37:09

Last updated 2026-03-12 16:20:14

Assigner VulnCheck

State PUBLISHED

Description

202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send crafted requests with malicious SQL statements in the log_user field to extract sensitive database information or modify database contents.

← Browse all CVEs View on cve.org ↗