Vulnerabilidades de Konradpl99
CVEs publicadas que afetam produtos de Konradpl99: 2 registro(s), com severidade, exploração e correções.
CVE-2019-25539
Alta · 8.2
CWE-89 12/03/2026
202CMS v10 beta SQL Injection via register.php
202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send POST requests to index.php with crafted SQL payloads using time-based blind injection techniques to extract sensitive database information.
CVE-2019-25538
Alta · 8.2
CWE-89 12/03/2026
202CMS v10 beta SQL Injection via log_user Parameter
202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter. Attackers can send crafted requests with malicious SQL statements in the log_user field to extract sensitive database information or modify database contents.