Sql injection

2016-12-1922:59:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.1%

JSON

SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1.

CPENameOperatorVersion
dotcmsle3.3.1

CPE	Name	Operator	Version
	dotcms	le	3.3.1

References

dotcms.com/security/SI-35

www.securityfocus.com/bid/94992

github.com/dotCMS/core/issues/8848