| Package | Affected versions | Patched versions |
|---|---|---|
| tilde cms | = 1.0.1 |
An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free