3 matches found
CVE-2019-11450
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...
9.8CVSS9.9AI score0.01452EPSS
SaveExploits1References1
CVE-2019-11450
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...
9.8CVSS7.3AI score0.01452EPSS
SaveExploits1References1
CVE-2019-11450
CVE-2019-11450 affects Whatsns 4.0, where SQL injection is possible via the title parameter in index.php?question/ajaxadd.html. The issue is documented with CVSS v3.0 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH). Affected component: the title field in the ajaxadd endpoint; root c...
9.8CVSS9.8AI score0.01452EPSS
SaveExploits1References1Affected Software1
20