Skip to content
Heist/ feed
High

FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx

Type: advisorySource: Official CVE List1 source record

FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/City_ajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the sys_City query, to extract database information. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.

Announced Source revision 1
Original source ↗

CVE-2015-20128

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2015-20128

DotNetCMS

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "FooSun",
    "product": "DotNetCMS",
    "versions": [
      {
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]
Related CVEs
CVE-2015-20128

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#53053 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement