CVE-2018-18399

CVE-2018-18399 affects KARMA 6.0.0 (ArchiveNews.aspx, ContentPlaceHolder1_uxTitle). The vulnerability is a SQL injection in the id parameter that allows remote execution of arbitrary SQL commands. CVSS v3.0 base score 9.8 (CRITICAL; Network, no auth, UI=None). No remediation details are provided ...