Skip to content
Threat Feed

Vendor

GoFrendiAsgard

1 brief RSS
high advisory

No-CMS 1.0 SQL Injection Vulnerability (CVE-2018-25431)

No-Cms 1.0 is vulnerable to SQL injection (CVE-2018-25431) in the order_by parameter of the manage_privilege export endpoint, allowing authenticated attackers to manipulate database queries and potentially extract sensitive information.

No-Cms 1.0 sql-injection cve-2018-25431 web-application
2r 1t 1c