Security Advisory
CVE-2016-4040
7.2
HIGH
Vulnerability Description
SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.
Published Date
April 19, 2016
Official Source
NIST NVD Advisory