high8.8
CVE-2019-12251
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.
Impact
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ucms Project | Ucms | Version 1.4.7 |