YoudianCMS SQL Injection Vulnerability (CNVD-2022-59020)

2022-06-1700:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.001 Low

EPSS

Percentile

37.9%

JSON

YouDianCMS is a web CMS. SQL injection vulnerability exists in YoudianCMS v9.5.0, which originates from a missing validation of external input SQL statements in the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
长沙友点软件科技有限公司 youdiancms veq9.5.0

CPE	Name	Operator	Version
	长沙友点软件科技有限公司 youdiancms v	eq	9.5.0

0.001 Low

EPSS

Percentile

37.9%

JSON

Related for CNVD-2022-59020