Vulnerabilities > Joyplus Project > Joyplus CMS

DATE CVE VULNERABILITY TITLE RISK
2018-07-22 CVE-2018-14501 SQL Injection vulnerability in Joyplus Project Joyplus-Cms 1.6.0
manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.
network
low complexity
joyplus-project CWE-89
critical
9.8