Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34831
HistoryMar 25, 2022 - 9:42 a.m.

SQL Injection

2022-03-2509:42:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
forkcms
sql injection
deletedata
model.php
arbitrary queries

EPSS

0.001

Percentile

30.3%

forkcms/forkcms is vulnerable to SQL Injection attacks. The vulnerability exists in deleteData function in Model.php due to lack of validations which allows a malicious user to inject and execute arbitrary SQL queries on the server.

EPSS

0.001

Percentile

30.3%

Related for VERACODE:34831