CVE-2019-6259: SQL Injection
Published Jan 14, 2019
·Updated
An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php dataid parameter.
Affected Software
1 affected component
icmsdev icms=7.0.13
Event History
Jan 14, 2019
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-6259.
2
What is the severity level of CVE-2019-6259?
CVE-2019-6259 has a severity level of critical (9.8).
3
What is the affected software?
The affected software is idreamsoft iCMS version 7.0.13.
4
How does the SQL Injection vulnerability occur?
The SQL Injection vulnerability occurs via the `_data_id` parameter in the `app/article/article.admincp.php` file.
5
Is there any solution or fix available for this vulnerability?
At the moment, there is no specific fix or patch available for this vulnerability. It is recommended to apply security best practices and monitor for updates from the software vendor.