CVE-2011-4826: Autosectools V-CMS

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in session.php in AutoSec Tools V-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to process.php. NOTE: some of these details are obtained from third party information.

Affected products

• Autosectools V-CMS: version 1.0 only

Published 2011-12-15. Last modified 2026-06-16.