Skip to content
OpenAdvisories
Critical · 9.1 CVE-2021-36434 EUVD-2021-23037GHSA-jfj8-hv62-2cmm

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_ch…

Published Feb 3, 2023 · Updated Mar 26, 2025 · Assigned by mitre

Description

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_check function in jocms/apps/mask/inc/getmask.php.

References