Description
app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI.
Unscored
CVE-2019-11362
EUVD-2019-3040GHSA-5855-c4ch-q7j5
app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by th…
Published Apr 20, 2019 · Updated Aug 4, 2024 · Assigned by mitre