SQL Injection in Ivan Cordoba Generic Content Management System
CVE-2018-20568

9.8CRITICAL

Key Information:

Vendor: Generic Content Management System Project
Status: Generic Content Management System
Vendor: CVE Published:; 28 December 2018

🔔 Create Generic Content Management System Project Vulnerability Alert

What is CVE-2018-20568?

The Ivan Cordoba Generic Content Management System is vulnerable to SQL injection through the administrator/index.php page, allowing unauthorized access and authentication bypass. This vulnerability can be exploited by attackers to execute arbitrary SQL queries, potentially gaining access to sensitive data and compromising the integrity of the CMS.

References

https://github.com/nabby27/CMS/pull/2

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Dec 28, 2018

CVE-2018-20568 Data

JSON