CVE-2018-14440

CVE-2018-14440 describes an SQL injection in the fictional product “cckevincyh SSH CompanyWebsite” affecting versions up to 2018-05-03, reachable via the admin/noticeManageAction_queryNotice.action?noticeInfo parameter. The issue arises from unsanitized input on this parameter, enabling potential...