NetSight
high7.5

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file.

Impact

A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database.

Affected products

VendorProductAffected versions
Victor Cms ProjectVictor Cms
Version 1.0

Weakness classification

References