← All advisories

High severity7.5NVD Advisory· Published Jul 19, 2019· Updated Jun 17, 2026

CVE-2019-12946

CVE-2019-12946

Description

Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx.

Affected products

3

Elcom/CMSdescription
Elcom/Elcom CMS2 versions
cpe:2.3:a:elcom:elcom_cms:10.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elcom:elcom_cms:10.7:*:*:*:*:*:*:*
- (no CPE)range: <10.7

Patches

Vulnerability mechanics

References

1

blog.contentsecurity.com.au/security-advisory-elcom-cms-sql-injectionnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.