CVE-2021-36432

2023-02-0300:00:00

mitre

www.cve.org

sql injection

jocms 0.8

remote attackers

arbitrary sql commands

sensitive information

jo_set_mask() function

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_set_mask() function in jocms/apps/mask/mask.php.

References

github.com/mxgbr/jocms/issues/6