Recent Vulnerabilities Discussions Trends Blog About Contact

By Relevance

By Risk Score

By Publish Date

By Recent Activity

6.5

CVSSv2

Published: 06/12/2018 Updated: 26/12/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal authenticated users via the post[id][1] parameter in an article edit_post action.

Vendor	Product	Versions
Thinkcmf	Thinkcmf	X2.2.2

CWE-89 https://github.com/thinkcmf/cmfx/issues/26 https://nvd.nist.gov https://exchange.xforce.ibmcloud.com/vulnerabilities/154035

Home Recent Vulnerabilities Discussions Trends Blog About Contact

CVE-2018-19898

Vulnerability Summary

Vulnerability Trend

Affected Products

References