CVE-2018-18450

Опубликовано: 17 окт. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST data to the admin.php/Single/mod/mcode/1/id/3 URI.

Ссылки

http://www.ttk7.cn/post-96.html
Exploit
Third Party Advisory
https://www.pbootcms.com/changelog.html
Product
Vendor Advisory
http://www.ttk7.cn/post-96.html
Exploit
Third Party Advisory
https://www.pbootcms.com/changelog.html
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pbootcms:pbootcms:*:*:*:*:*:*:*:*

Версия до 1.3.0 (исключая)

EPSS

Процентиль: 58%

0.0037

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-649c-29v5-r3r8