← Back

Com Privmsg

com_privmsg

Vendor: Limbo Cms • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Limbo Cms
1Com Privmsg
Apr 23, 2026
Feb 6, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php.