Vulnerabilidades de Purei
CVEs publicadas que afetam produtos de Purei: 1 registro(s), com severidade, exploração e correções.
CVE-2024-58301
Crítica · 9.3
CWE-89 11/12/2025
Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints
Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially extract or modify database information.