PT-2018-12551

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue concerns SQL Injection in the manager/admin ajax.php file. This can be exploited by sending crafted POST data, for example, a substring like "m id=1 AND SLEEP5". Recommendations For joyplus-cms...