PT-2022-27876
CVE-2022-46442
·
تاريخ النشر
2022-12-27
·
تاريخ التحديث
2023-01-06
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
dedecms versions prior to V5.7.103
Description
The issue is related to SQL Injection. In the sys sql n query.php file, there are no restrictions on the SQL query, which can be exploited.
Recommendations
For dedecms versions prior to V5.7.103, update to version V5.7.103 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾