4.7
Medium
CVE-2023-6772 A vulnerability, which was classified as critical, was found in OTCMS 7.01
Description
A vulnerability, which was classified as critical, was found in OTCMS 7.01. Affected is an unknown function of the file /admin/ind_backstage.php. The manipulation of the argument sqlContent leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247908.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OTCMS | 7.01 | No fix stated |
Other CVEs of OTCMS
The 9 CVEs of OTCMS →
CVE-2023-3241
A vulnerability was found in OTCMS up to 6.62 and classified as problematic
3.5
Low
CVE-2023-3240
A vulnerability has been found in OTCMS up to 6.62 and classified as problematic
3.5
Low
CVE-2023-3239
A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62
3.5
Low
CVE-2023-3238
A vulnerability, which was classified as critical, has been found in OTCMS up to 6.62
6.3
Medium