Sql injection

2022-01-0420:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to upgrade as soon as possible. There are not workarounds for this issue.

CPENameOperatorVersion
useful_simple_open-source_cmseq< pb2.4bfx2

CPE	Name	Operator	Version
	useful_simple_open-source_cms	eq	< pb2.4bfx2

References

github.com/Aaron-Junker/USOC/commit/21e8bfd7a9ab0b7f9344a7a3a7c32a7cdd5a0b69

github.com/Aaron-Junker/USOC/security/advisories/GHSA-fjp4-phjh-jgmc