p PatchFirst

CVE-2020-21808

CVE-2020-21808

This page contains facts from public vulnerability sources. Check the original advisory before updating.

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php.

CVSS 9.8 · Critical · EPSS 1.6% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nukeviet/nukeviet Packagist

    Versions
    • 4.0.24
    Affected ranges
    • ECOSYSTEM: ≥ 4.0.10, < 4.3.08

    Update to 4.3.08

Original sources

Check your server →