critical9.8
CVE-2022-28512
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 .
Impact
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fantastic Blog Project | Fantastic Blog | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md
- https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html
- https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md
- https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html