EasyCMS vulnerabilities
We track 4 vulnerabilities in EasyCMS products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 8, 2026.
Latest EasyCMS vulnerabilities
- 8.8 High severity
EasyCMS: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order results in sql injection. The attack
- 8.8 High severity
EasyCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order leads to sql injection. The attack can be
- 9.8 Critical severity
EasyCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of the argument _order leads to sql injection. The attack can be executed remotely. The exploit is publicly availa
- 9.8 Critical severity
Easycms: Improper Neutralization of Special Elements used in an SQL Command
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement.