CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request.

Summary:

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request.

Reference Links(if available):

  • https://github.com/876054426/vul/blob/master/ljcms_sql.md
  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)