Skip to content
OpenAdvisories
Critical · 9.1 CVE-2021-36431 EUVD-2021-23034GHSA-q8vx-hrfr-v7f5

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_ch…

Published Feb 3, 2023 · Updated Mar 26, 2025 · Assigned by mitre

Description

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_check() function in jocms/apps/mask/inc/mask.php.

References