Vulnerabilities

TI-2023-18160 CVE-2023-36213 · GHSA-h3gc-qm52-jx4g

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain…

HIGH 82

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01407 Published 2023-08-03 No fix listed CWE-89

TI-2023-18157 CVE-2023-36210 · GHSA-255v-grg6-24pg

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side…

HIGH 82

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30868 Published 2023-08-01 No fix listed CWE-74

Vulnerabilities

Filters

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain…

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side…