Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-30995

SQL Injection via vereador_ver.php in Slah CMS

Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Slah Cms
Products
Slah Cms
CVE-2026-30993

Remote Code Execution via Session Function in Slah CMS

Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php. This vulnerability is exploitable via a crafted input.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Slah Cms
Products
Slah Cms
CVE-2026-30994

Unauthenticated Access to Config File Exposes Session Credentials in Slah v1.5.0 and Earlier

Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Slah Cms
Products
Slah Cms