PT-2019-18651

Name of the Vulnerable Software and Affected Versions baijiacms version V4 Description The issue allows for time-based blind SQL injection, enabling data retrieval via the cate parameter in an "index.php?act=index" request. Recommendations For baijiacms version V4, consider restricting access to...

CVE-2019-7568: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate parameter in an index.php?act=index request...

CVE-2018-16724

An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request...

CVE-2018-16724: Improper Neutralization of Special Elements used in an SQL Command

An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request...

PT-2018-13701

Name of the Vulnerable Software and Affected Versions baijiacms version V4 Description A Blind SQL Injection issue exists via the order parameter in an "index.php?act=index" request. Recommendations For baijiacms version V4, avoid using the order parameter in the "index.php?act=index" request unt...