CVE-2018-7282

CRITICALNuclei

titool printmonitor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2018-7282 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 19, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

printmonitor

Browse titool / printmonitor
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALTITool PrintMonitor - Blind SQL InjectionCVSS 9.8

The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi.

Impact

Unauthenticated attackers can execute time-based blind SQL injection to extract database contents, potentially compromising user credentials and sensitive printing data.

Remediation

Upgrade to PM18.2.1.

WeaknessesCWE-89
Authorstheamanrawat
Template tagstime-based-sqlicve2018cvesqliprintmonitorunauthtitoolvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:titool:printmonitor:*:*:*:*:*:*:*:*
Shodan: title:"PrintMonitor"
Shodan: http.title:"printmonitor"
FOFA: title="printmonitor"
Google: intitle:"printmonitor"
https://fenceposterror.github.io/cve-2018-7282.txt https://nvd.nist.gov/vuln/detail/CVE-2018-7282 http://print.com/ http://ti-tool.com/

Source: ProjectDiscovery

References

4