NetSight
high8.1

CVE-2020-21649

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.

Impact

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.

Affected products

VendorProductAffected versions
Myucms ProjectMyucms
Version 2.2

Weakness classification

References