Vulnerabilities > Jocms Project

DATE CVE VULNERABILITY TITLE RISK
2023-02-03 CVE-2021-36431 SQL Injection vulnerability in Jocms Project Jocms 0.8
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_check() function in jocms/apps/mask/inc/mask.php.
network
low complexity
jocms-project CWE-89
critical
 9.1
9.1
2023-02-03 CVE-2021-36432 SQL Injection vulnerability in Jocms Project Jocms 0.8
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_set_mask() function in jocms/apps/mask/mask.php.
network
low complexity
jocms-project CWE-89
7.5
7.5
2023-02-03 CVE-2021-36433 SQL Injection vulnerability in Jocms Project Jocms 0.8
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_delete_mask function in jocms/apps/mask/mask.php.
network
low complexity
jocms-project CWE-89
critical
 9.1
9.1
2023-02-03 CVE-2021-36434 SQL Injection vulnerability in Jocms Project Jocms 0.8
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_check function in jocms/apps/mask/inc/getmask.php.
network
low complexity
jocms-project CWE-89
critical
 9.1
9.1