CVE-2022-23873

Publication date

2022-02-03 02:43:53

Family

mitre

State

PUBLISHED

Description

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via user_firstname parameter.