CVE-2022-24600

Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-03-10

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Luocms (Luocms Project)

References

• https://github.com/jsjbcyber/bug_report/blob/main/bug_g