CVE-2017-18194

2018-02-2216:29:00

CWE-89

web.nvd.nist.gov

cve-2017-18194

sql injection

users/signup.php

signup component

hamayeshnegar cms

remote attacker

arbitrary sql commands

utype parameter

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

CPENameOperatorVersion
hamayeshnegar:hamayeshnegar_cmshamayeshnegar hamayeshnegar cmseq*

CPE	Name	Operator	Version
hamayeshnegar:hamayeshnegar_cms	hamayeshnegar hamayeshnegar cms	eq	*

References

cxsecurity.com/issue/WLB-2017090094

cxsecurity.com/issue/WLB-2018020267