DotNetCMS vulnerabilities

CVEs whose affected-version data names the DotNetCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2015-20128High· 8.2

yesterday

FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/City_ajax.aspx with UNION SELEC…

▾ TwilightFooSun · DotNetCMSvia CVEORG