Luocms SQL Injection Vulnerability (CNVD-2022-20134)

2022-03-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

luocms

sql injection

vulnerability

validation

external input

admin login

illegal commands

sensitive data

cnvd-2022-20134

EPSS

0.002

Percentile

54.5%

JSON

Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/login.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

54.5%

JSON

Related for CNVD-2022-20134