HIGH🇬🇧 English

CVE-2022-32299

CVSS 8.8v3.1pub. 2022-06-15upd. 2024-11-21

YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Youdiancms

    APP
    Youdiancms
    9.5.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
SQLi
CWE
Referencje

Powiązane podatności

CVE-2024-57052CRITICAL9.8PL ✓ten sam produkt

Eskalacja uprawnień przez manipulację sessionID w YouDianCMS

CVE-2022-32301CRITICAL9.8ten sam produkt

YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib...

CVE-2022-32300HIGH8.8ten sam produkt

YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App...

CVE-2020-18116HIGH8.8ten sam produkt

A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL ...

CVE-2025-3531MEDIUM5.3ten sam produkt

A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of...