Konradpl99 vulnerabilities
2 vulnerabilities
Known vulnerabilities in Konradpl99 products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- 202Cms2 vulnerabilities
CVE-2019-25539konradpl99202cms+1
EPSS score0.42%
202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send POST requests to index.php with crafted SQL payloads using time-based blind injection techniques to extract sensitive database information.CVE-2019-25538konradpl99202cms+1EPSS score0.37%
202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send crafted requests with malicious SQL statements in the log_user field to extract sensitive database information or modify database contents.