CVE-2016-2355

SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1.

• CWE-89

• http://dotcms.com/security/SI-35Patch, Vendor Advisory
• http://www.securityfocus.com/bid/94992
• https://github.com/dotCMS/core/issues/8848Issue Tracking, Patch
• http://dotcms.com/security/SI-35Patch, Vendor Advisory
• http://www.securityfocus.com/bid/94992
• https://github.com/dotCMS/core/issues/8848Issue Tracking, Patch

Published

Dec 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2349Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP …
• CVE-2016-2350Multiple cross-site scripting (XSS) vulnerabilities on the A…
• CVE-2016-2351SQL injection vulnerability in home/seos/courier/security_ke…
• CVE-2016-2352The Accellion File Transfer Appliance (FTA) before FTA_9_12_…
• CVE-2016-2353The Accellion File Transfer Appliance (FTA) before FTA_9_12_…
• CVE-2016-2354The Bluetooth functionality in Lemur Vehicle Monitors BlueDr…
• CVE-2016-2356Milesight IP security cameras through 2016-11-14 have a buff…9.8
• CVE-2016-2357Milesight IP security cameras through 2016-11-14 have a hard…9.8
• CVE-2016-2358Milesight IP security cameras through 2016-11-14 have a defa…9.8
• CVE-2016-2359Milesight IP security cameras through 2016-11-14 allow remot…9.8
• CVE-2016-2360Milesight IP security cameras through 2016-11-14 have a defa…9.8
• CVE-2016-2362Fonality (previously trixbox Pro) 12.6 through 14.1i before …