Description
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement.
Unscored
CVE-2022-23358
EUVD-2022-28437GHSA-wwq9-3w37-xj9v
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized…
Published Feb 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre