Lucene search

CVE-2018-14501

🗓️ 22 Jul 2018 17:00:29Reported by mitreType

cve🔗 web.nvd.nist.gov👁 31 Views🌐 WEB

joyplus-cms 1.6.0 SQL Injection in manager/admin_ajax.ph

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2018-14501	22 Jul 201817:00	–	cvelist
Prion	Sql injection	22 Jul 201817:29	–	prion
NVD	CVE-2018-14501	22 Jul 201817:29	–	nvd

Nvd

Node

joyplus_project joyplus-cmsMatch1.6.0

Source	Link
github	www.github.com/joyplus/joyplus-cms/issues/432

Parameter	Position	Path	Description	CWE
m_id	request body	/manager/admin_ajax.php	SQL Injection vulnerability allowing attackers to execute arbitrary SQL commands via crafted POST data.	CWE-89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Jul 2018 17:29Current

9.5High risk

Vulners AI Score9.5

CVSS27.5

CVSS39.8

EPSS0.00264

CWE-89