CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_update_categories.php.

• CWE-89

• https://cxsecurity.com/issue/WLB-2020120118Exploit, Third Party Advisory
• https://github.com/VictorAlagwu/CMSsite/issues/16Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/49282Exploit, Third Party Advisory, VDB Entry
• https://cxsecurity.com/issue/WLB-2020120118Exploit, Third Party Advisory
• https://github.com/VictorAlagwu/CMSsite/issues/16Issue Tracking, Third Party Advisory
• https://www.exploit-db.com/exploits/49282Exploit, Third Party Advisory, VDB Entry

Published

Jun 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3559A vulnerability in Cisco Aironet Access Point (AP) Software …8.6
• CVE-2020-35590LimitLoginAttempts.php in the limit-login-attempts-reloaded …9.8
• CVE-2020-35591Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The app…5.4
• CVE-2020-35592Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options heade…5.4
• CVE-2020-35593BMC PATROL Agent through 20.08.00 allows local privilege esc…7.8
• CVE-2020-35594Zoho ManageEngine ADManager Plus before 7066 allows XSS.6.1
• CVE-2020-35598ACS Advanced Comment System 1.0 is affected by Directory Tra…7.5
• CVE-2020-3560A vulnerability in Cisco Aironet Access Points (APs) could a…8.6
• CVE-2020-35604An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is u…9.8
• CVE-2020-35605The Graphics Protocol feature in graphics.c in kitty before …9.8
• CVE-2020-35606Arbitrary command execution can occur in Webmin through 1.96…8.8
• CVE-2020-35608A code execution vulnerability exists in the normal world’s …7.8