cve/CVE-2018-7474.md at 18943f3353ca1cc3fd2595afa412856465e29c78 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-12-30 04:49:42 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

652 B

Raw Blame History

CVE-2018-7474

Description

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php.

POC

Reference

Github

No PoCs found on GitHub currently.