Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6pj7-7hg8-7vr5

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter.

Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter.

EPSS

Процентиль: 28%
0.00099
Низкий

Дефекты

CWE-89

Связанные уязвимости

nvd
больше 16 лет назад

Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via (1) the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or (2) the topic_id parameter.

EPSS

Процентиль: 28%
0.00099
Низкий

Дефекты

CWE-89