Skip to content
OpenAdvisories
High · 8.8 CVE-2023-39378 EUVD-2023-43103GHSA-7cq7-xjf7-493q

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

Published Sep 26, 2023 · Updated Sep 24, 2024 · Assigned by INCD

Vendor: SiberianCMS Product: SiberianCMS

Description

SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user

Affected products

VendorProductAffectedFixed
SiberianCMS SiberianCMS versions 4.*, 5.* – ≤ upgrade to version 4.20.44 or 5.0.4 —

References