Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-30993 1 Slah Cms 1 Slah Cms 2026-04-16 9.8 Critical
Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php. This vulnerability is exploitable via a crafted input.
CVE-2026-30994 1 Slah Cms 1 Slah Cms 2026-04-16 7.5 High
Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials.
CVE-2026-30995 1 Slah Cms 1 Slah Cms 2026-04-15 8.6 High
Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint.