Security Advisory

CVE-2018-19894

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-06 04:00:00

Last updated 2024-09-17 03:07:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exploitable with the manager privilege via the ids[] parameter in a commentadmin action.

← Browse all CVEs View on cve.org ↗