Product

joyplus project joyplus-cms vulnerabilities

1 published CVE affecting joyplus project joyplus-cms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest joyplus project joyplus-cms CVEs

Newest publication first

CVE-2018-14501 manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.
Published 2018-07-22

CriticalCVSS 9.8 EPSS 1.5%

manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

joyplus project joyplus-cms vulnerabilities

Latest joyplus project joyplus-cms CVEs

CVE-2018-14501 manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.