Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php. The vulnerability allows attackers to redirect authenticated users to malicious URLs, potentially leading to credential theft and OAuth abuse. This CVE record was published on 2026-08-13T16:19:07.580Z and has not been modified since then. The NVD entry is currently Defe [truncated]
A SQL injection vulnerability exists in the admin/db_data.php file of a Content Management System (CMS) at line 509. This vulnerability allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by providing unsanitized input through the table_name GET or POST parameter. The vulnerability can be exploited using various techniques such as table traversal, time-based blin [truncated]
