CVE-2020-21119

CRITICAL

Kliqqi-CMS 2.0.2 - SQL Injection via recordIDValue Parameter

Title source: llm

Description

SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gain escalated privileges and execute arbitrary code.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Vendor Advisory

https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/259

Scores

CVSS v3 9.8

EPSS 0.0089

EPSS Percentile 55.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (1)

kliqqi/kliqqi_cms 2.0.2

Published Feb 15, 2023

Tracked Since Feb 18, 2026