Vulnerability CVE-2022-43128

Vulnerability CVE-2022-43128

Published: 2023-04-16

Description:

Dreamer CMS 4.0.1 allows SQL injection via ArchivesMapper.xml.

See advisories in our WLB2 database:

	Topic	Author	Date
Med.	Dreamer CMS 4.0.0 SQL Injection	lvren	02.04.2023

Type:

CWE-89

(Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

References:

https://gitee.com/isoftforce/dreamer_cms/issues/I5U408

https://gitee.com/isoftforce/dreamer_cms/tree/Previous_Releases_4.0.1

Copyright 2024, cxsecurity.com