Security Advisory
CVE-2020-23966
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request.