Skip to content
OpenAdvisories

Product · goFrendiAsgard

No-CMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2018-25431

    No-Cms 1.0 SQL Injection via order_by Parameter

    No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate database queries. Attackers can submit POST requests to /nocms/main/manage_privilege/index/e…

    goFrendiAsgard No-CMS