CVE-2020-20796

FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-09-30

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Flamecms (Flamecms Project)

References

• https://github.com/FlameNET/FlameCMS/issues/24