ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.

Published Nov 3, 2021 · Updated Aug 4, 2024 · Assigned by mitre