Recent Vulnerabilities Product List Research Posts Trends Blog Docs About Contact

Published: 15/04/2025 Updated: 22/04/2025

SQL Injection in dingfanzuCMS v.1.0 Enables Arbitrary Code Execution

A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a malicious user to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
geeeeeeeek dingfanzu 1.0

CWE-89 https://nvd.nist.gov https://www.first.org/epss https://github.com/gh3-dk/vul/blob/main/sql%20injection/dingfanzu/dingfanzu-CMS%20operateOrder.php%20id%20SQL-inject.md

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-28100

Vulnerability Summary

References

Vulmon Search

About

Products

Connect