CVE-2018-18619

KRITISCH 9.8CVE-2018-18619 · Published 29/11/2018 · updated 17/06/2026

Kurz gesagt

CVE-2018-18619 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in advanced comment system (advanced comment system project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.2%, höher als bei 90.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
advanced comment system advanced_comment_system_project	`= 1.0`	No fix yet

Description

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter. NOTE: The product is discontinued.

References

packetstormsecurity.com/files/150261/Advanced-Comment-System-1.0-SQL-Injection.html · Exploit
seclists.org/fulldisclosure/2018/Nov/30 · Exploit
exploit-db.com/exploits/45853 · Exploit

Weitere Schwachstellen in advanced comment system

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free