CVE-2021-36432

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via josetmask function in jocms/apps/mask/mask.php...

Sql injection

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jojsoncheck function in jocms/apps/mask/inc/getmask.php...

Sql injection

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jodeletemask function in jocms/apps/mask/mask.php...

Sql injection

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via josetmask function in jocms/apps/mask/mask.php...

Sql injection

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jojsoncheck function in jocms/apps/mask/inc/mask.php...

Sql injection

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file...

CVE-2021-37497

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...

CVE-2021-36434

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jojsoncheck function in jocms/apps/mask/inc/getmask.php...

CVE-2021-36431

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jojsoncheck function in jocms/apps/mask/inc/mask.php...

CVE-2021-36431

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jojsoncheck function in jocms/apps/mask/inc/mask.php...

CVE-2021-36431

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jojsoncheck function in jocms/apps/mask/inc/mask.php...

PT-2023-12273 · Jocms · Jocms

Name of the Vulnerable Software and Affected Versions: jocms version 0.8 Description: The issue allows remote attackers to execute arbitrary SQL commands and view sensitive information. This is achieved via the jo json check function in jocms/apps/mask/inc/getmask.php. Recommendations: For jocms...

PT-2023-12271

Name of the Vulnerable Software and Affected Versions jocms version 0.8 Description The issue allows remote attackers to execute arbitrary SQL commands and view sensitive information. This is achieved via the jo set mask function in jocms/apps/mask/mask.php. Recommendations For jocms version 0.8,...

CVE-2021-36433

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jodeletemask function in jocms/apps/mask/mask.php...

CVE-2021-36432

CVE-2021-36432 describes an SQL injection in the Jocms CMS (version 0.8) via the function jo_set_mask() in jocms/apps/mask/mask.php . The vulnerability enables remote attackers to execute arbitrary SQL and access sensitive data. Public PoC/exploitation is indicated in the ADP entry (Exploitation:...

CVE-2021-36503

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file...

CVE-2021-36434

CVE-2021-36434 affects jocms version 0.8. The vulnerability is a SQL injection in the jo_json_check function located at jocms/apps/mask/inc/getmask.php, allowing remote attackers to run arbitrary SQL commands and view sensitive information. Multiple connected sources corroborate the issue and its...

CVE-2021-36433: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jodeletemask function in jocms/apps/mask/mask.php...

CVE-2021-36432

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via josetmask function in jocms/apps/mask/mask.php...

CVE-2021-37497: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request...