Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request.