CVE-2019-17552: SQL Injection
Published Oct 14, 2019
·Updated
An issue was discovered in idreamsoft iCMS v7.0.14. There is a spiderproject.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload.
Affected Software
1 affected component
idreamsoft iCMS=7.0.14
Event History
Oct 14, 2019
CVE Published
via MITRE·12:32 PM
Data Sourced
via MITRE·12:32 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-17552?
The severity of CVE-2019-17552 is critical with a score of 9.8.
2
What is CVE-2019-17552?
CVE-2019-17552 is a SQL injection vulnerability in the 'upload spider project scheme' feature in idreamsoft iCMS v7.0.14.
3
What software versions are affected by CVE-2019-17552?
The affected software version of CVE-2019-17552 is idreamsoft iCMS v7.0.14.
4
Is there a reference for CVE-2019-17552?
Yes, you can find a reference for CVE-2019-17552 at https://github.com/idreamsoft/iCMS/issues/77.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-17552?
The CWE ID for CVE-2019-17552 is 89.