CVE-2016-4040 in dotCMS

摘要

由 MITRE

SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2016-04-19
• 披露: 2016-04-19
• 管理: 已接受
• 条目: VDB-82568
• CPE: 准备好
• CWE: CWE-89 (已确认)
• CVSS: 7.2 (NVD)
• EPSS: 0.01327
• KEV: 否
• 活动: 非常低
• 部门: Agriculture, Lawfirm, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-4040
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-4040
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-4040/