CVE-2020-20636 Information

Description

SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad() function.

Reference

https://github.com/joyplus/joyplus-cms/issues/447