CVE-2018-6576

CRITICAL

Event Manager 1.0 - SQL Injection via event.php id or page.php slug Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-6576. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary This is a writeup describing SQL injection vulnerabilities in Event Manager PHP Script 1.0. It provides URLs for exploitation but lacks actual exploit code or payloads.

Description

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter.

Exploits (1)

exploitdb WRITEUP
by Ihsan Sencan · textwebappsphp
https://www.exploit-db.com/exploits/43949

This is a writeup describing SQL injection vulnerabilities in Event Manager PHP Script 1.0. It provides URLs for exploitation but lacks actual exploit code or payloads.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Event Manager PHP Script 1.0
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/43949

Scores

CVSS v3 9.8
EPSS 0.0270
EPSS Percentile 84.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
ezcode/event_manager 1.0
Published Feb 02, 2018
Tracked Since Feb 18, 2026