Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2019-25303

TheJshen contentManagementSystem 1.04 - 'id' SQL Injection

Description

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information by crafting malicious query payloads.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

thejshen contentManagementSystem

  • 1.04affected

References