Security Advisory
CVE-2016-2355
9.8
CRITICAL
Vulnerability Description
SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1.
Published Date
December 19, 2016
Official Source
NIST NVD Advisory