SQL Injection Vulnerability in Ivan Cordoba Generic Content Management System
CVE-2018-20569

9.8CRITICAL

Key Information:

Vendor: Generic Content Management System Project
Status: Generic Content Management System
Vendor: CVE Published:; 28 December 2018

🔔 Create Generic Content Management System Project Vulnerability Alert

What is CVE-2018-20569?

The Ivan Cordoba Generic Content Management System is susceptible to an SQL injection vulnerability in its user/index.php file. This flaw can be exploited to perform authentication bypass, potentially allowing an unauthorized user to gain access to sensitive areas of the system. This vulnerability is present in all versions of the CMS up until April 28, 2018. Users of this CMS should take immediate actions to mitigate exposure by applying necessary patches and reviewing their security configurations.

References

https://github.com/nabby27/CMS/pull/2

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Dec 28, 2018

CVE-2018-20569 Data

JSON