CVE-2018-7282

CRITICAL EXPLOITED NUCLEI

TITool PrintMonitor < pm18.2.1 - SQL Injection via Username Parameter

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2018-7282 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi.

Nuclei Templates (1)

TITool PrintMonitor - Blind SQL Injection
CRITICALVERIFIEDby theamanrawat
Shodan: title:"PrintMonitor" || http.title:"printmonitor"
FOFA: title="printmonitor"

References (3)

Core 3
Core References
Broken Link x_refsource_misc
http://ti-tool.com
Not Applicable x_refsource_misc
http://print.com
Exploit, Third Party Advisory x_refsource_misc
https://fenceposterror.github.io/cve-2018-7282.txt

Scores

CVSS v3 9.8
EPSS 0.1009
EPSS Percentile 95.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2025-08-19
CWE
CWE-89
Status published
Products (1)
titool/printmonitor < pm18.2.1
Published Dec 06, 2019
Tracked Since Feb 18, 2026