The Game Server Status WordPress plugin through 1.0 does not validate or escape the serverid parameter before using it in SQL statement, leading to an Authenticated SQL Injection in an admin page...
7.2CVSS7.1AI score0.013EPSS
SaveExploits2References2
OSV•added 2018/06/22 8:29 p.m.•4 views
DEBIAN-CVE-2018-12689
phpLDAPadmin 1.2.2 allows LDAP injection via a crafted serverid parameter in a cmd.php?cmd=loginform request, or a crafted username and password in the login panel...
9.8CVSS7.4AI score0.01799EPSS
SaveExploits1References1
OSV•added 2018/06/22 8:29 p.m.•8 views
UBUNTU-CVE-2018-12689
phpLDAPadmin 1.2.2 allows LDAP injection via a crafted serverid parameter in a cmd.php?cmd=loginform request, or a crafted username and password in the login panel...