CVE-2016-9333: Moxa Softcms

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION).

Affected products

• Moxa Softcms: up to and including 1.5

Published 2017-02-13. Last modified 2026-06-17.