dingfanzuCMS SQL Injection Vulnerability in operateOrder.php
Vulnerability
A SQL injection vulnerability has been identified in dingfanzuCMS version 1.0. This vulnerability allows attackers to execute arbitrary code by exploiting the 'id' parameter in the 'operateOrder.php' file, due to inadequate content filtering.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to execute arbitrary SQL commands. This could lead to unauthorized data access, data manipulation, or in some cases, executing arbitrary code on the server.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
8.7remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.