Vulnerabilities (CVE)

Filtered by vendor Sitasoftware Subscribe
Filtered by product Azurcms
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27950 1 Sitasoftware 1 Azurcms 2021-07-06 6.5 MEDIUM 8.8 HIGH
A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA.