high7.5
CVE-2019-12946
Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx.
Impact
Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elcom | Elcom Cms | Version 10.7 |