Lucene search

K
cvelistMitreCVELIST:CVE-2016-8907
HistoryNov 14, 2016 - 11:00 p.m.

CVE-2016-8907

2016-11-1423:00:00
mitre
www.cve.org

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

SQL injection vulnerability in the “Content Types > Content Types” screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

Related for CVELIST:CVE-2016-8907