CVE-2015-20128 | FooSun DotNetCMS 1.0/2.0 /user/City_ajax.aspx CityId sql injection

October 20, 2026 Yanac

A vulnerability was found in FooSun DotNetCMS 1.0/2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/City_ajax.aspx. Executing a manipulation of the argument CityId can lead to sql injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability appears as CVE-2015-20128. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More