Konradpl99 vulnerabilities
Published CVEs affecting Konradpl99 products: 2 record(s), with severity, exploitation and fixes.
CVE-2019-25539
High · 8.2
CWE-89 Mar 12, 2026
202CMS v10 beta SQL Injection via register.php
202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send POST requests to index.php with crafted SQL payloads using time-based blind injection techniques to extract sensitive database information.
CVE-2019-25538
High · 8.2
CWE-89 Mar 12, 2026
202CMS v10 beta SQL Injection via log_user Parameter
202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send crafted requests with malicious SQL statements in the log_user field to extract sensitive database information or modify database contents.