cve/2018/CVE-2018-18804.md

CVE-2018-18804

Description

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.

POC

Reference

• http://packetstormsecurity.com/files/150012/Bakeshop-Inventory-System-In-VB.Net-MS-Access-Database-1.0-SQL-Injection.html
• http://packetstormsecurity.com/files/150012/Bakeshop-Inventory-System-In-VB.Net-MS-Access-Database-1.0-SQL-Injection.html
• https://www.exploit-db.com/exploits/45720/
• https://www.exploit-db.com/exploits/45720/

Github

No PoCs found on GitHub currently.