Critical · 9.8 CVE-2020-21808 EUVD-2022-3103GHSA-84gf-rw24-pfqg

NukeViet SQL Injection vulnerability via topicsid parameter

Published Jul 29, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php.

Ecosystem	Package	Affected	Fixed	Record
Packagist	nukeviet/nukeviet	>= 4.0.10, < 4.3.08	4.3.08	GHSA-84gf-rw24-pfqg