Sourceforge 202Cms vulnerabilities

2 vulnerabilities

Known vulnerabilities in Sourceforge 202Cms, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2019-25539konradpl99202cms+1
EPSS score
0.42%
202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send POST requests to index.php with crafted SQL payloads using time-based blind injection techniques to extract sensitive database information.8.8CVE-2019-25538konradpl99202cms+1
EPSS score
0.37%
202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send crafted requests with malicious SQL statements in the log_user field to extract sensitive database information or modify database contents.