1 results (0.001 seconds)

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1

03 Feb 2023 — SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file. • https://github.com/Fanli2012/native-php-cms/issues/3 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •