3 matches found
Sql injection
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via viewunpushedbundles.jsp...
6.5CVSS7.3AI score0.01276EPSS
SaveExploits0References2Affected Software1
CVE-2019-12872
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via viewunpushedbundles.jsp...
7.3AI score0.01276EPSS
SaveExploits0References2
CVE-2019-12872: Improper Neutralization of Special Elements used in an SQL Command
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via viewunpushedbundles.jsp...
7.2CVSS5.8AI score0.01276EPSS
SaveExploits0References2
20