CVE-2025-22976
SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module.
- Score
- CVSS 3.1 7.1 High
- Status
- Deferred - cve@mitre.org
- Published
- 2025-01-15
- Last modified
- 2025-02-03
- Weaknesses
- CWE-89
References
- https://github.com/xiaosguang/cve/blob/main/dingfanzu/dingfanzu-CMS%20checkOrder.php%20shopId%20SQL-inject.md
