CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1999022

PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method, HTML_QuickForm_hierselect's _setOptions method, HTML_QuickForm_element's _findValue method, HTML_QuickForm_element's _prepareValue method. that can result in Possible information disclosure, possible impact on data integrity and execution of arbitrary code. This attack appear to be exploitable via A specially crafted query string could be utilised, e.g. http://www.example.com/admin/add_practice_type_id[1]=fubar%27])%20OR%20die(%27OOK!%27);%20//&mode=live. This vulnerability appears to have been fixed in 3.2.15.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-1999022

Civicrm » Civicrm » Version: 3.1.0

cpe:2.3:a:civicrm:civicrm:3.1.0
Civicrm » Civicrm » Version: 4.0.5

cpe:2.3:a:civicrm:civicrm:4.0.5
Civicrm » Civicrm » Version: 4.1.0

cpe:2.3:a:civicrm:civicrm:4.1.0
Civicrm » Civicrm » Version: 4.1.1

cpe:2.3:a:civicrm:civicrm:4.1.1
Civicrm » Civicrm » Version: 4.1.2

cpe:2.3:a:civicrm:civicrm:4.1.2
Civicrm » Civicrm » Version: 4.1.3

cpe:2.3:a:civicrm:civicrm:4.1.3
Civicrm » Civicrm » Version: 4.1.4

cpe:2.3:a:civicrm:civicrm:4.1.4
Civicrm » Civicrm » Version: 4.1.5

cpe:2.3:a:civicrm:civicrm:4.1.5
Civicrm » Civicrm » Version: 4.1.6

cpe:2.3:a:civicrm:civicrm:4.1.6
Civicrm » Civicrm » Version: 4.2.0

cpe:2.3:a:civicrm:civicrm:4.2.0
Civicrm » Civicrm » Version: 4.2.1

cpe:2.3:a:civicrm:civicrm:4.2.1
Civicrm » Civicrm » Version: 4.2.10

cpe:2.3:a:civicrm:civicrm:4.2.10
Civicrm » Civicrm » Version: 4.2.11

cpe:2.3:a:civicrm:civicrm:4.2.11
Civicrm » Civicrm » Version: 4.2.12

cpe:2.3:a:civicrm:civicrm:4.2.12
Civicrm » Civicrm » Version: 4.2.13

cpe:2.3:a:civicrm:civicrm:4.2.13
Civicrm » Civicrm » Version: 4.2.14

cpe:2.3:a:civicrm:civicrm:4.2.14
Civicrm » Civicrm » Version: 4.2.2

cpe:2.3:a:civicrm:civicrm:4.2.2
Civicrm » Civicrm » Version: 4.2.4

cpe:2.3:a:civicrm:civicrm:4.2.4
Civicrm » Civicrm » Version: 4.2.5

cpe:2.3:a:civicrm:civicrm:4.2.5
Civicrm » Civicrm » Version: 4.2.6

cpe:2.3:a:civicrm:civicrm:4.2.6
Civicrm » Civicrm » Version: 4.2.7

cpe:2.3:a:civicrm:civicrm:4.2.7
Civicrm » Civicrm » Version: 4.2.8

cpe:2.3:a:civicrm:civicrm:4.2.8
Civicrm » Civicrm » Version: 4.2.9

cpe:2.3:a:civicrm:civicrm:4.2.9
Civicrm » Civicrm » Version: 4.3.0

cpe:2.3:a:civicrm:civicrm:4.3.0
Civicrm » Civicrm » Version: 4.3.1

cpe:2.3:a:civicrm:civicrm:4.3.1
Civicrm » Civicrm » Version: 4.3.10

cpe:2.3:a:civicrm:civicrm:4.3.10
Civicrm » Civicrm » Version: 4.3.11

cpe:2.3:a:civicrm:civicrm:4.3.11
Civicrm » Civicrm » Version: 4.3.2

cpe:2.3:a:civicrm:civicrm:4.3.2
Civicrm » Civicrm » Version: 4.3.3

cpe:2.3:a:civicrm:civicrm:4.3.3
Civicrm » Civicrm » Version: 4.3.4

cpe:2.3:a:civicrm:civicrm:4.3.4
Civicrm » Civicrm » Version: 4.3.5

cpe:2.3:a:civicrm:civicrm:4.3.5
Civicrm » Civicrm » Version: 4.3.6

cpe:2.3:a:civicrm:civicrm:4.3.6
Civicrm » Civicrm » Version: 4.3.7

cpe:2.3:a:civicrm:civicrm:4.3.7
Civicrm » Civicrm » Version: 4.3.8

cpe:2.3:a:civicrm:civicrm:4.3.8
Civicrm » Civicrm » Version: 4.3.9

cpe:2.3:a:civicrm:civicrm:4.3.9
Civicrm » Civicrm » Version: 4.4

cpe:2.3:a:civicrm:civicrm:4.4
Civicrm » Civicrm » Version: 4.4.0

cpe:2.3:a:civicrm:civicrm:4.4.0
Civicrm » Civicrm » Version: 4.4.1

cpe:2.3:a:civicrm:civicrm:4.4.1
Civicrm » Civicrm » Version: 4.4.10

cpe:2.3:a:civicrm:civicrm:4.4.10
Civicrm » Civicrm » Version: 4.4.11

cpe:2.3:a:civicrm:civicrm:4.4.11
Civicrm » Civicrm » Version: 4.4.12

cpe:2.3:a:civicrm:civicrm:4.4.12
Civicrm » Civicrm » Version: 4.4.13

cpe:2.3:a:civicrm:civicrm:4.4.13
Civicrm » Civicrm » Version: 4.4.14

cpe:2.3:a:civicrm:civicrm:4.4.14
Civicrm » Civicrm » Version: 4.4.15

cpe:2.3:a:civicrm:civicrm:4.4.15
Civicrm » Civicrm » Version: 4.4.16

cpe:2.3:a:civicrm:civicrm:4.4.16
Civicrm » Civicrm » Version: 4.4.17

cpe:2.3:a:civicrm:civicrm:4.4.17
Civicrm » Civicrm » Version: 4.4.18

cpe:2.3:a:civicrm:civicrm:4.4.18
Civicrm » Civicrm » Version: 4.4.19

cpe:2.3:a:civicrm:civicrm:4.4.19
Civicrm » Civicrm » Version: 4.4.2

cpe:2.3:a:civicrm:civicrm:4.4.2
Civicrm » Civicrm » Version: 4.4.20

cpe:2.3:a:civicrm:civicrm:4.4.20
Civicrm » Civicrm » Version: 4.4.21

cpe:2.3:a:civicrm:civicrm:4.4.21
Civicrm » Civicrm » Version: 4.4.3

cpe:2.3:a:civicrm:civicrm:4.4.3
Civicrm » Civicrm » Version: 4.4.4

cpe:2.3:a:civicrm:civicrm:4.4.4
Civicrm » Civicrm » Version: 4.4.5

cpe:2.3:a:civicrm:civicrm:4.4.5
Civicrm » Civicrm » Version: 4.4.6

cpe:2.3:a:civicrm:civicrm:4.4.6
Civicrm » Civicrm » Version: 4.4.7

cpe:2.3:a:civicrm:civicrm:4.4.7
Civicrm » Civicrm » Version: 4.4.8

cpe:2.3:a:civicrm:civicrm:4.4.8
Civicrm » Civicrm » Version: 4.4.9

cpe:2.3:a:civicrm:civicrm:4.4.9
Civicrm » Civicrm » Version: 4.5.0

cpe:2.3:a:civicrm:civicrm:4.5.0
Civicrm » Civicrm » Version: 4.5.1

cpe:2.3:a:civicrm:civicrm:4.5.1
Civicrm » Civicrm » Version: 4.5.2

cpe:2.3:a:civicrm:civicrm:4.5.2
Civicrm » Civicrm » Version: 4.5.3

cpe:2.3:a:civicrm:civicrm:4.5.3
Civicrm » Civicrm » Version: 4.5.4

cpe:2.3:a:civicrm:civicrm:4.5.4
Civicrm » Civicrm » Version: 4.5.5

cpe:2.3:a:civicrm:civicrm:4.5.5
Civicrm » Civicrm » Version: 4.5.6

cpe:2.3:a:civicrm:civicrm:4.5.6
Civicrm » Civicrm » Version: 4.5.7

cpe:2.3:a:civicrm:civicrm:4.5.7
Civicrm » Civicrm » Version: 4.5.8

cpe:2.3:a:civicrm:civicrm:4.5.8
Civicrm » Civicrm » Version: 4.6.0

cpe:2.3:a:civicrm:civicrm:4.6.0
Civicrm » Civicrm » Version: 4.6.1

cpe:2.3:a:civicrm:civicrm:4.6.1
Civicrm » Civicrm » Version: 4.6.10

cpe:2.3:a:civicrm:civicrm:4.6.10
Civicrm » Civicrm » Version: 4.6.11

cpe:2.3:a:civicrm:civicrm:4.6.11
Civicrm » Civicrm » Version: 4.6.12

cpe:2.3:a:civicrm:civicrm:4.6.12
Civicrm » Civicrm » Version: 4.6.13

cpe:2.3:a:civicrm:civicrm:4.6.13
Civicrm » Civicrm » Version: 4.6.14

cpe:2.3:a:civicrm:civicrm:4.6.14
Civicrm » Civicrm » Version: 4.6.15

cpe:2.3:a:civicrm:civicrm:4.6.15
Civicrm » Civicrm » Version: 4.6.16

cpe:2.3:a:civicrm:civicrm:4.6.16
Civicrm » Civicrm » Version: 4.6.17

cpe:2.3:a:civicrm:civicrm:4.6.17
Civicrm » Civicrm » Version: 4.6.18

cpe:2.3:a:civicrm:civicrm:4.6.18
Civicrm » Civicrm » Version: 4.6.19

cpe:2.3:a:civicrm:civicrm:4.6.19
Civicrm » Civicrm » Version: 4.6.2

cpe:2.3:a:civicrm:civicrm:4.6.2
Civicrm » Civicrm » Version: 4.6.20

cpe:2.3:a:civicrm:civicrm:4.6.20
Civicrm » Civicrm » Version: 4.6.21

cpe:2.3:a:civicrm:civicrm:4.6.21
Civicrm » Civicrm » Version: 4.6.22

cpe:2.3:a:civicrm:civicrm:4.6.22
Civicrm » Civicrm » Version: 4.6.23

cpe:2.3:a:civicrm:civicrm:4.6.23
Civicrm » Civicrm » Version: 4.6.24

cpe:2.3:a:civicrm:civicrm:4.6.24
Civicrm » Civicrm » Version: 4.6.25

cpe:2.3:a:civicrm:civicrm:4.6.25
Civicrm » Civicrm » Version: 4.6.26

cpe:2.3:a:civicrm:civicrm:4.6.26
Civicrm » Civicrm » Version: 4.6.27

cpe:2.3:a:civicrm:civicrm:4.6.27
Civicrm » Civicrm » Version: 4.6.28

cpe:2.3:a:civicrm:civicrm:4.6.28
Civicrm » Civicrm » Version: 4.6.29

cpe:2.3:a:civicrm:civicrm:4.6.29
Civicrm » Civicrm » Version: 4.6.3

cpe:2.3:a:civicrm:civicrm:4.6.3
Civicrm » Civicrm » Version: 4.6.30

cpe:2.3:a:civicrm:civicrm:4.6.30
Civicrm » Civicrm » Version: 4.6.31

cpe:2.3:a:civicrm:civicrm:4.6.31
Civicrm » Civicrm » Version: 4.6.32

cpe:2.3:a:civicrm:civicrm:4.6.32
Civicrm » Civicrm » Version: 4.6.33

cpe:2.3:a:civicrm:civicrm:4.6.33
Civicrm » Civicrm » Version: 4.6.34

cpe:2.3:a:civicrm:civicrm:4.6.34
Civicrm » Civicrm » Version: 4.6.35

cpe:2.3:a:civicrm:civicrm:4.6.35
Civicrm » Civicrm » Version: 4.6.36

cpe:2.3:a:civicrm:civicrm:4.6.36
Civicrm » Civicrm » Version: 4.6.37

cpe:2.3:a:civicrm:civicrm:4.6.37
Civicrm » Civicrm » Version: 4.6.4

cpe:2.3:a:civicrm:civicrm:4.6.4
Civicrm » Civicrm » Version: 4.6.5

cpe:2.3:a:civicrm:civicrm:4.6.5
Civicrm » Civicrm » Version: 4.6.6

cpe:2.3:a:civicrm:civicrm:4.6.6
Civicrm » Civicrm » Version: 4.6.7

cpe:2.3:a:civicrm:civicrm:4.6.7
Civicrm » Civicrm » Version: 4.6.8

cpe:2.3:a:civicrm:civicrm:4.6.8
Civicrm » Civicrm » Version: 4.6.9

cpe:2.3:a:civicrm:civicrm:4.6.9
Civicrm » Civicrm » Version: 5.3.0

cpe:2.3:a:civicrm:civicrm:5.3.0
Html Quickform Project » Html Quickform » Version: 3.2.14

cpe:2.3:a:html_quickform_project:html_quickform:3.2.14

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1999022

Products

Pricing

Contact Us