Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-26781 EUVD-2023-30574GHSA-3whv-7544-3cv4

SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.

Published Apr 28, 2023 · Updated Jan 31, 2025 · Assigned by mitre

Description

SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.

References