GitHub Advisoryadvisory · NuGet

GHSA-5xr5-v2h7-2w7w SQL injection in SiteServer CMS

HIGH Published 2022-05-25 Modified 2022-06-03 Official page ↗
Aliases
CVE-2021-42655
Ecosystem
NuGet
Packages
SSCMS
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Reviewed
2022-06-03

Affected packages

• NuGet SSCMS: <= 6.15.51 (no fix yet)

Description

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Related

Alias · CVE (1)

  • CVE-2021-42655 SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability. vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References