CVE-2018-20569
CRITICALGeneric Content Management System < 20180428 - SQL Injection via user/index.php
Title source: llmDescription
user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/nabby27/CMS/pull/2
Scores
CVSS v3
9.8
EPSS
0.0163
EPSS Percentile
73.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
generic_content_management_system_project/generic_content_management_system
< 20180428
Published
Dec 28, 2018
Tracked Since
Feb 18, 2026