Skip to content
OpenAdvisories

Product · FooSun

DotNetCMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2015-20128

    FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx

    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/City_ajax.aspx with UNION SELECT payloads in CityId, …

    FooSun DotNetCMS