high8.8
CVE-2021-22847
Hyweb HyCMS-J1's API fail to filter POST request parameters.
Impact
Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hyweb | Hycms-J1 | through 7.4.3 |