Skip to content
OpenAdvisories

Vendor

Saurus

2 known vulnerabilities.

Products

Saurus CMS Community Edition 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-73670

    CMS Admin SQL Injection via db_data.php table_name Parameter

    A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by supplying unsanitized input through the table_name GET or POST parameter. Atta…

    Saurus Saurus CMS Community Edition