critical9.8
CVE-2025-28100
A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.ph…
Impact
A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geeeeeeeek | Dingfanzu | Version 1.0 |