CVE-2020-22198 – SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22198

Reference (s):

• http://www.hackdig.com/?02/hack-8391.htm
• https://github.com/blindkey/DedeCMSv5/issues/1