CVE-2018-16410

Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/class.invitationmodel.php and applications/dashboard/controllers/class.profilecontroller.php...

CVE-2018-16410

Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/class.invitationmodel.php and applications/dashboard/controllers/class.profilecontroller.php...

PT-2018-13552

Name of the Vulnerable Software and Affected Versions Vanilla versions prior to 2.6.1 Description The issue allows SQL injection via an invitationID array to the "/profile/deleteInvitation" API endpoint, related to the applications/dashboard/models/class.invitationmodel.php and...