~ / search / GHSA-84gf-rw24-pfqg

GHSA-84gf-rw24-pfqg

NukeViet SQL Injection vulnerability via topicsid parameter

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-21808

Packages

EcosystemPackageAffectedFixed in
Packagist nukeviet/nukeviet >= 4.0.10, < 4.3.08 4.3.08

Details

As written in the advisory (Markdown source, shown as plain text).

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via the topicsid parameter in `modules/news/admin/addtotopics.php`.

References

External links from the advisory. They lead to third-party sites.