← All advisories

Critical severity9.8NVD Advisory· Published Aug 27, 2020· Updated Jun 17, 2026

CVE-2020-23973

CVE-2020-23973

Description

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Kandnconcepts Club CMS Project/Kandnconcepts Club CMS2 versions
cpe:2.3:a:kandnconcepts_club_cms_project:kandnconcepts_club_cms:1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kandnconcepts_club_cms_project:kandnconcepts_club_cms:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:kandnconcepts_club_cms_project:kandnconcepts_club_cms:1.2:*:*:*:*:*:*:*
KandNconcepts/Club CMScpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.1 - 1.2

Patches

Vulnerability mechanics

References

1

packetstormsecurity.com/files/157049/KandNconcepts-Club-CMS-1.1-1.2-Cross-Site-Scripting-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.