| Package | Affected versions | Patched versions |
|---|---|---|
| cubic cms | = 5.1.1= 5.1.2= 5.2 |
Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the (1) resource_id or (2) version_id parameter to recursos/agent.php or (3) login or (4) pass parameter to login.usuario.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free