4 matches found
CVE-2021-44302
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...
Sql injection
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...
CVE-2021-44302
CVE-2021-44302 affects BaiCloud-cms v2.5.7 and is due to multiple SQL injection vulnerabilities exposed through the tongji and baidu_map parameters in /user/ztconfig.php. The NVD records CVSS 3.1 base score 8.8 (HIGH) with network access, low attack complexity, and privileges required at LOW, ind...
CVE-2021-44302
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidumap parameters in /user/ztconfig.php...