CVE-2017-14601

EUVD-2017-6102
Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
pragyan_cms_projectpragyan_cms
3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/delta/pragyan/issues/228
https://github.com/delta/pragyan/issues/228