CWE-89

CVE-2020-20675

February 26, 2023 by

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/.

CVE-2020-20692

February 26, 2023 by

GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.

CVE-2020-20796

February 26, 2023 by

FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the “Id” parameter.

CVE-2020-20797

February 26, 2023 by

FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php.

CVE-2020-20800

February 26, 2023 by

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.

CVE-2020-20583

February 26, 2023 by

A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.