CVE-2018-19415

The CVE-2018-19415 entry describes SQL injection vulnerabilities in Plikli CMS 4.0.0. According to connected documents, remote attackers can execute arbitrary SQL commands by supplying crafted input in (1) id to join_group.php and (2) comment_id to story.php. The root cause is improper handling o...