CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2018/09/03 7:29 p.m.•20 views

CVE-2018-16410

Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/class.invitationmodel.php and applications/dashboard/controllers/class.profilecontroller.php...

6.5CVSS7.9AI score

SaveExploits0References2

Prion•added 2018/09/03 7:29 p.m.•29 views

Sql injection

4CVSS6.9AI score0.0094EPSS

SaveExploits1References2Affected Software1

Mend•added 2018/09/03 7:00 p.m.•3 views

CVE-2018-16410

7.1CVSS0.0094EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/09/03 12:00 a.m.•11 views

CVE-2018-16410: Improper Neutralization of Special Elements used in an SQL Command

6.5CVSS6.8AI score0.0094EPSS

SaveExploits1References2

Positive Technologies•added 2018/09/03 12:00 a.m.•6 views

PT-2018-13552

Name of the Vulnerable Software and Affected Versions Vanilla versions prior to 2.6.1 Description The issue allows SQL injection via an invitationID array to the "/profile/deleteInvitation" API endpoint, related to the applications/dashboard/models/class.invitationmodel.php and...

6.5CVSS0.0094EPSS

SaveExploits1References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by