CVE-2019-8421 BageCMS SQL Injectio
Reporter | Title | Published | Views | Family All 3 |
---|---|---|---|---|
![]() | Sql injection | 17 Feb 201922:29 | – | prion |
![]() | CVE-2019-8421 | 17 Feb 201922:00 | – | cvelist |
![]() | CVE-2019-8421 | 17 Feb 201922:29 | – | nvd |
Source | Link |
---|---|
github | www.github.com/bagesoft/bagecms/issues/5 |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
title | query param | /upload/protected/modules/admini/views/post/index.php | BageCMS 3.1.4 allows SQL Injection via the title or titleAlias parameter. | CWE-89 |
titleAlias | query param | /upload/protected/modules/admini/views/post/index.php | BageCMS 3.1.4 allows SQL Injection via the title or titleAlias parameter. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo