high7.5Public exploit code
CVE-2020-28091
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- xuucms 3 - 'keywords' SQL Injection2020-11-19 · webapps · multiple
Impact
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cxuu | Cxuucms | Version 3.0 |