CVE-2018-18399

SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...

PT-2018-14441

Name of the Vulnerable Software and Affected Versions jco.ir KARMA version 6.0.0 Description A SQL injection issue exists in the ContentPlaceHolder1 uxTitle component in ArchiveNews.aspx, allowing a remote attacker to execute arbitrary SQL commands via the id parameter. Recommendations For jco.ir...

CVE-2018-18399: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...