SQL Injection in Fork CMS

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-1064 · ADVISORY
• forkcms/forkcms commit 6aca30e · WEB
• forkcms/forkcms · PACKAGE
• huntr.dev/bounties/2f664985-c5fc-485b-b4fc-4c401be2cf40 · WEB

Lỗ hổng khác của forkcms/forkcms

• CVE-2022-35590TRUNG BÌNH 4.8A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_date" Parameter
• CVE-2022-35589TRUNG BÌNH 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_time" Paramete…
• CVE-2022-35587TRUNG BÌNH 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Paramete…
• CVE-2022-35585TRUNG BÌNH 4.8A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "start_date" Par…
• CVE-2022-0153CAO 7.5SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.