mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 19:21:35 +02:00
707 B
707 B
CVE-2018-18399
Description
SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter.
POC
Reference
Github
No PoCs found on GitHub currently.