CVE-2021-36431

CVE-2021-36431 concerns a SQL injection in the Jocms 0.8 CMS. The vulnerability occurs in the function jo_json_check() within jocms/apps/mask/inc/mask.php, allowing remote attackers to execute arbitrary SQL and view sensitive data. CVSSv3.1 metrics in the public entries indicate a Network attack ...

CVE-2021-36432

CVE-2021-36432 describes an SQL injection in the Jocms CMS (version 0.8) via the function jo_set_mask() in jocms/apps/mask/mask.php . The vulnerability enables remote attackers to execute arbitrary SQL and access sensitive data. Public PoC/exploitation is indicated in the ADP entry (Exploitation:...

CVE-2021-36434

CVE-2021-36434 affects jocms version 0.8. The vulnerability is a SQL injection in the jo_json_check function located at jocms/apps/mask/inc/getmask.php, allowing remote attackers to run arbitrary SQL commands and view sensitive information. Multiple connected sources corroborate the issue and its...

CVE-2021-36433

CVE-2021-36433 affects jocms 0.8. It is a SQL injection vulnerability in the jo_delete_mask function (jocms/apps/mask/mask.php) that allows remote attackers to run arbitrary SQL and view sensitive data. CVSS v3.1 base score 9.1 (CRITICAL); impact on confidentiality and integrity; attack vector NE...