Vendor
Redeight
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.3
SQL Injection in Redeight CMS
An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared st…