Luocms SQL Injection Vulnerability (CNVD-2022-20132)

2022-03-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

luocms

sql injection

vulnerability

article management

external input

admin

illegal commands

sensitive data

cnvd-2022-20132

EPSS

0.002

Percentile

54.5%

JSON

Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/news_ok.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

54.5%

JSON

Related for CNVD-2022-20132