Beveiligingsadvies

CVE-2020-37076

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-03 22:01:43

Laatst bijgewerkt 2026-02-04 16:20:31

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries. Attackers can exploit this vulnerability by sending crafted UNION SELECT payloads to extract database information through boolean-based, error-based, and time-based injection techniques.

← Alle CVE's bekijken Bekijk op cve.org ↗