PT-2019-11999
CVE-2019-10707
·
تاريخ النشر
2019-04-02
·
تاريخ التحديث
2019-04-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MKCMS version 5.0
Description
The issue is related to SQL injection, which occurs via the
play parameter in the bplay.php file.Recommendations
For MKCMS version 5.0, avoid using the
play parameter in the bplay.php file until a patch is available. As a temporary workaround, consider restricting access to the bplay.php file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾