Description
SQL injection vulnerability in the "Site Browser > HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Glossary 'ajax.php' SQL Injection (0.1)
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.5)
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5324)
Joomla! Core 2.5.x Security Bypass (2.5.0 - 2.5.4)
WordPress Plugin WP GuestMap Multiple Cross-Site Scripting Vulnerabilities (1.8)