CVE

Id
90859  
CVE No.
CVE-2016-4040  
Status
Candidate  
Description
SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.  
Phase
Assigned (20160419)  
Votes
None (candidate not yet proposed)  
Comments