high7.2
CVE-2016-4040
SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parame…
Impact
SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dotcms | Dotcms | through 3.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dotcms.com/security/SI-36
- https://github.com/dotCMS/core/commit/bc4db5d71dc67015572f8e4c6fdf87e29b854d02
- https://github.com/dotCMS/core/issues/8840
- http://dotcms.com/security/SI-36
- https://github.com/dotCMS/core/commit/bc4db5d71dc67015572f8e4c6fdf87e29b854d02
- https://github.com/dotCMS/core/issues/8840