6 matches found
CVE-2020-18476
HuCartCMS 5.7.4 is affected by a SQL injection vulnerability in the usd_image field (reported as header/avatar usd_image in some sources). The CVE-2020-18476 entry documents a SQLi in HuCartCMS 5.7.4 via this field, with high severity in CVSS 3.1 (8.8) and medium in CVSS 2.0 (6.5). Concrete detai...
CVE-2019-18476
CVE-2019-18476 is rejected and not used; it does not represent an active vulnerability entry.
CVE-2018-18476
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns...
CVE-2018-18476
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns...
CVE-2018-18476
The CVE-2018-18476 entry concerns the mysql-binuuid-rails project. Affected software: mysql-binuuid-rails versions 1.1.0 and earlier. Root cause: the vulnerability arises because default string escaping is removed for affected database columns, enabling SQL injection. Reported impact: the issue a...