sweetcms vulnerabilities

Products

• sweetcms 2

Latest sweetcms CVEs

Newest publication first

1. CVE-2024-8334 master-nan Sweet-CMS log.go LogHandler neutralization for logs

   Published 2024-08-30

   Medium·CVSS 5.3 EPSS 0.48%

   A vulnerability was found in master-nan Sweet-CMS up to 5f441e022b8876f07cde709c77b5be6d2f262e3f. It has been rated as problematic. This issue affects the function LogHandler of the file middleware/log.go. The manipulation leads to improper output neutralization for logs. The att...

2. CVE-2008-4647 SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.

   Published 2008-10-21

   High·CVSS 7.5 EPSS 1.1%

   SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.