Luocms SQL Injection Vulnerability (CNVD-2022-20130)

2022-03-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

luocms

sql injection

vulnerability

article management system

validation

external input

illegal sql commands

sensitive database data

EPSS

0.002

Percentile

54.5%

JSON

Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/sort_ok.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

54.5%

JSON

Related for CNVD-2022-20130