Vulnerability Details CVE-2018-19461
admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.5%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
- http://i.3001.net/uploads/Up_imgs/20181117-95a316d46f9a46dda7c48e541777d1fc.png%21small
- http://i.3001.net/uploads/Up_imgs/20181117-ce3d7d20372096011393bfda0d6f9d07.png%21small
- https://github.com/novysodope/empireCMS7.5
- http://i.3001.net/uploads/Up_imgs/20181117-95a316d46f9a46dda7c48e541777d1fc.png%21small
- http://i.3001.net/uploads/Up_imgs/20181117-ce3d7d20372096011393bfda0d6f9d07.png%21small
- https://github.com/novysodope/empireCMS7.5
Products affected by CVE-2018-19461
-
cpe:2.3:a:phome:empirecms:6.6
-
cpe:2.3:a:phome:empirecms:7.0
-
cpe:2.3:a:phome:empirecms:7.2
-
cpe:2.3:a:phome:empirecms:7.5
-
cpe:2.3:a:phome:empirecms:7.5.0