CVE-2022-32101 kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kkcms project kkcms | = 1.37 | No fix listed |
References
- www.yuque.com exploit third-party-advisory