Skip to content
OpenAdvisories

Archive

8 March 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-3786 Public exploit

    EasyCMS Request Parameter RbacuserAction.class.php sql injection

    A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order results in sql injection. The attac…