Archive
8 March 2026
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 6.3CVE-2026-3786 Public exploit
EasyCMS Request Parameter RbacuserAction.class.php sql injection
A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order results in sql injection. The attac…