Lucene search

K
cvelistMitreCVELIST:CVE-2021-28242
HistoryApr 15, 2021 - 1:51 p.m.

CVE-2021-28242

2021-04-1513:51:23
mitre
www.cve.org
5
sql injection
b2evolution
v7.2.2-stable

AI Score

9.1

Confidence

High

EPSS

0.042

Percentile

92.3%

SQL Injection in the “evoadm.php” component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the “cf_name” parameter when creating a new filter under the “Collections” tab.

AI Score

9.1

Confidence

High

EPSS

0.042

Percentile

92.3%