{"id":"GHSA-84gf-rw24-pfqg","aliases":["CVE-2020-21808"],"title":"NukeViet SQL Injection vulnerability via topicsid parameter","description":"SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via the topicsid parameter in `modules/news/admin/addtotopics.php`.","severity":"critical","score":9.8,"published":"2022-05-24T19:09:25.000Z","modified":"2024-04-24T20:13:32.802Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"nukeviet/nukeviet","ranges":[{"events":[{"introduced":"4.0.10"},{"fixed":"4.3.08"}],"type":"ECOSYSTEM"}],"versions":["4.0.24"],"fixed":["4.3.08"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2020-21808","https://github.com/nukeviet/nukeviet","https://github.com/nukeviet/nukeviet/blob/4.3.08/CHANGELOG.txt#L11","https://nukeviet.vn/vi/news/Tin-an-ninh/huong-dan-fix-loi-bao-mat-nukeviet-4-va-module-shops-612.html","https://whitehub.net/submissions/1516"],"sources":[{"name":"OSV","id":"GHSA-84gf-rw24-pfqg","modified":"2024-04-24T20:13:32.802494Z","url":"https://osv.dev/vulnerability/GHSA-84gf-rw24-pfqg"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}]}