Description
A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter.
Critical · 9.8
CVE-2025-28100
EUVD-2025-11353GHSA-98g5-ch9p-4pc6
A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at …
Published Apr 15, 2025 · Updated Apr 16, 2025 · Assigned by mitre