CVE-2015-20128

FooSun DotNetCMS versions 1.0 and 2.0 are vulnerable to an SQL injection flaw in the /user/City_ajax.aspx endpoint. The root cause is the unsanitized concatenation of the CityId parameter into the sys_City query. Unauthenticated attackers can exploit this by sending GET requests containing UNION ...

EUVD-2015-9432

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/Cityajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sysCi...