CVE-2021-41672

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php

published June 15, 2022

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can inject a malicious SQL query in order to affect the execution logic of the application and retrive information from the database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01419 · 72.6th percentile
Published
2022-06-15T15:13Z
EPSS history
Timeline
  • 15 JUN 15:13Z
    PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php
    cvelistv5