Skip to content
OpenAdvisories
Critical · 9.1 CVE-2021-36433 EUVD-2021-23036GHSA-55v2-qcgf-vh9j

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_delete_…

Published Feb 3, 2023 · Updated Mar 26, 2025 · Assigned by mitre

Description

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_delete_mask function in jocms/apps/mask/mask.php.

References