Victoralagwu

7 CVEs across 1 Victoralagwu products. Browse Victoralagwu vulnerabilities, severities, and proof-of-concept exploits.

Victoralagwu products with known CVEs

ProductCVEs
Cmssite7
Victoralagwu CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25697High8.22026-04-12CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_…
CVE-2019-25682Medium4.32026-04-05CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML…
CVE-2019-25674High8.22026-04-05CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pos…
CVE-2020-37076High8.22026-02-03Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate database queries…
CVE-2020-37073High8.82026-02-03Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with arbitrary content through the user_image…
CVE-2020-37072High7.22026-02-03Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious scripts. A…
CVE-2020-36942High8.82026-01-27Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Att…