CVE-2019-6244

2019-01-1202:00:00

mitre

www.cve.org

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.0%

JSON

An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL statements, and consequently execute arbitrary PHP code by writing that code into a .php file.

References

github.com/fdbao/UsualToolCMS/issues/1