CVE-2015-20128

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 20, 2026

Last Seen

October 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Urgent CVE-2015-20128 SQL Injection Vulnerability in FooSun DotNetCMS72.2

FooSun DotNetCMS versions 1.0 and 2.0 contain an SQL injection vulnerability (CVE-2015-20128) that allows unauthenticated attackers to manipulate MSSQL queries via the CityId parameter. Exploitation was first observed on October 14, 2023, with attackers able to send crafted GET requests to /user/Cit...