CVE Catalog

CVE-2017-15981

Critical
Published: Translated: NVD NIST

Summary

Responsive Newspaper Magazine & Blog CMS version 1.0 allows SQL Injection via the id parameter in admin/admin_process.php for form editing.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to update the CMS to the latest version and implement input validation in forms.

Original NVD description (English source)

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS