ZeroHour

Vulnerabilities

3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2020-15540
We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.

NVD description · AI analysis pending
9.82% PoC ×2
  • we-com opendata cms
CVE-2020-15539
+1 in the same advisory: …15538
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.

SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.

NVD description · AI analysis pending
9.8
group max
2% PoC ×2
  • we-com municipality portal cms