Sql injection

2018-02-1214:29:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

JSON

controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter ‘module’ with a SQL statement, lacks effective filtering.

CPENameOperatorVersion
finecmseq5.2.0

CPE	Name	Operator	Version
	finecms	eq	5.2.0

References

xianzhi.aliyun.com/forum/topic/2050