Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-84069
HistoryMar 17, 2022 - 12:00 a.m.

Atom CMS SQL Injection Vulnerability

2022-03-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.016 Low

EPSS

Percentile

87.5%

Atom CMS is a content management system. A SQL injection vulnerability exists in Atom CMS version 2.0, which stems from a missing validation of external input SQL statements in the id parameter of /admin/ajax/avatar.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
atom cms atom cmseq2.0

0.016 Low

EPSS

Percentile

87.5%

Related for CNVD-2022-84069