Lucene search

K
cvelistMitreCVELIST:CVE-2016-8908
HistoryNov 14, 2016 - 11:00 p.m.

CVE-2016-8908

2016-11-1423:00:00
mitre
www.cve.org

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

SQL injection vulnerability in the “Site Browser > HTML pages” screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

Related for CVELIST:CVE-2016-8908