Researchers
Back
Sk4
Researcher from
Soter
#33212
of 60,589
8.8
Total CVSS
Vulnerabilities
·
1
PT-2022-11348
2022-06-09
8.8
CVE-2021-40961
Unknown
Cms Made Simple
The issue concerns SQL injection in the modules/News/function.admin articlestab.php file. Specifically, the `$sortby` variable is concatenated with `$query1`, allowing for the injection of arbitrary SQL language without using the '.' character.