Skysystem vulnerabilities
We track 2 vulnerabilities in Skysystem products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Skysystem vulnerabilities
- 8.8 High severity
arfa_cms: Cross-Site Request Forgery
A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.
- 9.8 Critical severity
arfa_cms: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter.