CVE-2019-6127

An issue was discovered in XiaoCms 20141229

published January 11, 2019

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

An issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table[] SQL injection. This can be used for PHP code execution via "INTO OUTFILE" with a .php filename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01506 · 74.2th percentile
Published
2019-01-11T05:00Z
EPSS history
Timeline
  • 11 JAN 05:00Z
    An issue was discovered in XiaoCms 20141229
    cvelistv5