CVE-2020-18262 – ED01-CMS v1.0 was discovered to contain a SQL injection in the component

ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18262

Reference (s):

• https://github.com/chilin89117/ED01-CMS/issues/3