Skip to content
OpenAdvisories
Unscored CVE-2018-7463 EUVD-2018-19194GHSA-xcc3-7v3w-6jqg

SQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6 allows a remote attacker to execute arbitrary S…

Published Feb 26, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

SQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter.

References