mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-07 13:26:41 +02:00
696 B
696 B
CVE-2018-18399
Description
SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter.
POC
Reference
Github
No PoCs found on GitHub currently.