CVE-2020-35597

Published June 16th, 2022

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_update_categories.php.

VictorAlagwu/CMSsite

A Simple Content Management System-Coded Using Mostly Procedural Programming Style in PHP

GitHub