TI-2015-08116 CVE-2015-20128 · GHSA-8cq3-m8mg-6c2h
SQL injection in FooSun DotNetCMS lets attackers read database data
Priority HIGH 77
FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter.