Beveiligingsadvies

CVE-2019-25538

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-12 15:37:09
Laatst bijgewerkt 2026-03-12 16:20:14
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send crafted requests with malicious SQL statements in the log_user field to extract sensitive database information or modify database contents.