cbcvebase.

Crm Sistemas De Fidelizaci N Megacms vulnerabilities

1 known vulnerability affecting crm_sistemas_de_fidelizaci_n/megacms.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-3325P2CRITICALCVSS 10.0v12.0.02026-04-29
CVE-2026-3325 [CRITICAL] CWE-89 CVE-2026-3325: SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_ SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadequate validation and sanitisation of user input. Specifically, via a POST request, the “id_territorio” parameter, used immediately after the registration form is submitted,
nvd
Crm Sistemas De Fidelizaci N Megacms vulnerabilities | cvebase