EDB-41377

functional

dotCMS 3.6.1 - Blind Boolean SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor Ben Nottpublished 2017-02-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-5344UScritical9.8Exploit
An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter() function which is called by the web accessible path /categoriesServlet performs string interpolation and…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan