siteserver CMS 3.6.4 background_mailSubscribe.aspx页面PublishmentSystemID参数-SQL注入

2021-01-19 SiteServer CMS PoC No

Description

【漏洞对象】SiteServer CMS 【涉及版本】3.6.4 【漏洞描述】该应用background_mailSubscribe.aspx文件PublishmentSystemID参数存在sql注入,可能造成数据泄露,甚至服务器被入侵。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities