YouDianCMS SQL Injection Vulnerability (CNVD-2022-59019)

2022-06-1700:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.002 Low

EPSS

Percentile

54.6%

JSON

A SQL injection vulnerability exists in YouDianCMS v9.5.0, which originates from a missing validation of external input SQL statements in the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
长沙友点软件科技有限公司 youdiancms veq9.5.0

CPE	Name	Operator	Version
	长沙友点软件科技有限公司 youdiancms v	eq	9.5.0

0.002 Low

EPSS

Percentile

54.6%

JSON

Related for CNVD-2022-59019