SQL Injection in Opensolution Quick.cms
CVE-2026-33385
A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administration panel allows for Blind SQL Injection attacks. The vendor stat…
Vulnerability class: SQL Injection
Affected products
- Opensolution Quick.cms — versions 6.8
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)