nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-18075 CVE-2018-18075
CRITICAL
Wikidforum 2.20 - 'select_sort' SQL Injection
Record summary
CVE-2018-18075 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
WikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the index.php?action=search select_sort parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWikidforum 2.20 - 'select_sort' SQL InjectionExploitDB exploitby seccopsNot analyzed1 file
References
3seccops.com
https://seccops.com/wikidforum-2-20-multiple-sql-injection-vulnerabilities 45564exploit
https://www.exploit-db.com/exploits/45564