CVE-2018-6893

2018-02-1214:00:00

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

JSON

controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter ‘module’ with a SQL statement, lacks effective filtering.

References

xianzhi.aliyun.com/forum/topic/2050