CVE-2021-33925
Critical
Description
SQL Injection vulnerability in nitinparashar30 cms-corephp through commit bdabe52ef282846823bda102728a35506d0ec8f9 (May 19, 2021) allows unauthenticated attackers to gain escilated privledges via a crafted login.
SeverityCritical
CVSS9.8
Exploit probability62. percentile1%
ProductCms-corephp
PublishedFeb 15, 2023
First seenFeb 15, 2023
Weakness typeCWE-89SQL injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cms-corephp_project cms-corephp | v ≤ 2021-05-19 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.