Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40475
HistoryMay 11, 2023 - 5:28 a.m.

SQL Injection

2023-05-1105:28:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
sql injection
torfs-ict/cmsms
m1_sortby parameter
function.admin_articlestab.php
vulnerability

EPSS

0.001

Percentile

41.8%

torfs-ict/cmsms is vulnerable to SQL Injection attacks. The vulnerability exists in the m1_sortby parameter in function.admin_articlestab.php due to improperly validated parameters, allowing a remote attacker to inject arbitrary SQL commands.

EPSS

0.001

Percentile

41.8%

Related for VERACODE:40475