Lucene search
+L

3 matches found

NVD
NVD
•added 2018/11/26 7:29 a.m.•26 views

CVE-2018-19558

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

9.8CVSS9.9AI score0.01135EPSS
SaveExploits1References1
Prion
Prion
•added 2018/11/26 7:29 a.m.•26 views

Sql injection

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

7.5CVSS9.8AI score0.01135EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/26 12:00 a.m.•3 views

CVE-2018-19558: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

9.8CVSS8.2AI score0.01135EPSS
SaveExploits1References2
Rows per page
Query Builder