2 matches found
CVE-2018-7732
An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...
9.8CVSS9.8AI score0.01097EPSS
SaveExploits1References1
CVE-2018-7732: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...
9.8CVSS8.2AI score0.01097EPSS
SaveExploits1References2
20