Skip to content
OpenAdvisories

Product · Redeight

Redeight CMS

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    SQL Injection in Redeight CMS

    An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared st…