CVE-2017-18194

2018-02-22T16:29:00
ID CVE-2017-18194
Type cve
Reporter cve@mitre.org
Modified 2018-03-09T17:36:00

Description

SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter.