3 matches found
CVE-2020-20636
SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad function...
CVE-2020-20636
SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad function...
CVE-2020-20636
The CVE-2020-20636 entry describes a SQL injection in Joyplus-cms v1.6.0, exploitable via the id parameter of the goodbad() function. Root cause is improper handling of user input leading to database access, enabling a remote attacker to access sensitive information. Public references indicate th...