CVE-2020-18746

Impact

SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_list.php".

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/kk98kk0/exploit/issues/3
• https://github.com/kk98kk0/exploit/issues/3