Lucene search
Veracode Vulnerability DatabaseVERACODE:34857HistoryMar 28, 2022 - 4:06 a.m.
SQL Injection
2022-03-2804:06:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
forkcms
sql injection
getcomments
software security
EPSS
0.001
Percentile
41.1%
forkcms/forkcms is vulnerable to SQL Injection attacks. The ids parameter in getComments function is not properly sanitized, which allows a malicious user to inject and execute arbitrary SQL queries on the target system.
Related
huntr
huntr
SQL injection through marking blog comments on bulk as spam
2022-03-23 12:35:17
osv
osv
SQL Injection in Fork CMS
2022-03-26 00:00:32
CVE-2022-1064
2022-03-25 12:15:07
prion
prion
Sql injection
2022-03-25 12:15:00
cve
cve
CVE-2022-1064
2022-03-25 12:15:07
cvelist
cvelist
github
github
SQL Injection in Fork CMS
2022-03-26 00:00:32
nvd
nvd
CVE-2022-1064
2022-03-25 12:15:07