CVEs-PoC/2018/CVE-2018-7474.md

CVE-2018-7474

Description

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php.

POC

Reference

• http://seclists.org/fulldisclosure/2018/Mar/34
• http://seclists.org/fulldisclosure/2018/Mar/34
• https://www.exploit-db.com/exploits/44277/
• https://www.exploit-db.com/exploits/44277/

Github

No PoCs found on GitHub currently.