NetSight
critical9.8

CVE-2020-21662

SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF.

Impact

SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF.

Affected products

VendorProductAffected versions
YunyecmsYunyecms
Version 2.0.2

Weakness classification

References