Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 10 MIN AGO
T-10M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-73670
CMS Admin SQL Injection via db_data.php table_name Parameter
High
PUBLISHED
CNA: VulnCheck
Base score
8.6
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
View raw JSON
CVE Program record
02
Description
CNA: VulnCheck
CMS Admin SQL Injection via db_data.php table_name Parameter
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 15:35Z
1 DAY AGO
Last updated
2026-08-14 16:52Z
1 HR AGO
Reserved
2026-08-13
Assigning CNA
VulnCheck
Record state
PUBLISHED
Severity
High (CVSS 8.6)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weaknesses
CWE-89
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
8bfcd56182159b8e0e4b89fc26dbc17bc2f98f9ba07797e19aa7634b22c332a3
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Saurus
Saurus CMS Community Edition
0 to d886e5b
—
05
References
REFS: 4
github.com
Product Repository
https://github.com/sauruscms/Saurus-CMS-Community-Edition
product
github.com
Blog Post
https://github.com/DevVaibhav07/VULN-POC/blob/main/Saurus.md
technical-description
www.vulncheck.com
Blog Post
https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce
www.vulncheck.com
https://www.vulncheck.com/advisories/cms-admin-sql-injection-via-db-data-php-table-name-parameter
third-party-advisory