Skip to content
OpenAdvisories

Vendor

Redeight

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.3

    SQL Injection in Redeight CMS

    An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared st…