exploitDog

CVE-2022-28060

Опубликовано: 28 апр. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php.

Ссылки

https://github.com/JiuBanSec/CVE/blob/main/VictorCMS%20SQL.md
Exploit
Third Party Advisory
https://github.com/JiuBanSec/CVE_LIST/blob/main/CVE-2022-28060/CVE-2022-28060.pdf
Exploit
Third Party Advisory
https://github.com/VictorAlagwu/CMSsite
Third Party Advisory
https://github.com/JiuBanSec/CVE/blob/main/VictorCMS%20SQL.md
Exploit
Third Party Advisory
https://github.com/JiuBanSec/CVE_LIST/blob/main/CVE-2022-28060/CVE-2022-28060.pdf
Exploit
Third Party Advisory
https://github.com/VictorAlagwu/CMSsite
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:victor_cms_project:victor_cms:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.00239

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-675h-c34q-8v9h

CVSS3: 7.5

github

почти 4 года назад

SQL Injection vulnerability in Victor CMS v1.0, via the user_name parameter to /includes/login.php.

EPSS

Процентиль: 47%

0.00239

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-89