A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters.
References
Link | Resource |
---|---|
https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md | Exploit Third Party Advisory |
https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html | Product Third Party Advisory |
https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md | Exploit Third Party Advisory |
https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html | Product Third Party Advisory |
Configurations
History
21 Nov 2024, 06:57
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md - Exploit, Third Party Advisory | |
References | () https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html - Product, Third Party Advisory |
12 May 2022, 14:21
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-89 | |
CPE | cpe:2.3:a:fantastic_blog_project:fantastic_blog:1.0:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
References | (MISC) https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md - Exploit, Third Party Advisory | |
References | (MISC) https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html - Product, Third Party Advisory |
04 May 2022, 15:35
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-05-04 15:15
Updated : 2024-11-21 06:57
NVD link : CVE-2022-28512
Mitre link : CVE-2022-28512
CVE.ORG link : CVE-2022-28512
JSON object : View
Products Affected
fantastic_blog_project
- fantastic_blog
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')