An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate parameter in an index.php?act=index request.
References
Link | Resource |
---|---|
https://github.com/baijiacms/baijiacmsV4/issues/2 | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-02-06 23:29
Updated : 2019-02-07 09:27
NVD link : CVE-2019-7568
Mitre link : CVE-2019-7568
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
baijiacms_project
- baijiacms