CVE-2018-7474

CRITICAL

Textpattern < 4.6.2 - SQL Injection via qty Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-7474. PoCs published by Manuel García Cárdenas.

AI-analyzed exploit summary The document describes a SQL injection vulnerability in Textpattern CMS <= 4.6.2, where the 'qty' parameter in 'index.php' is exploitable via HTTP/1.0. The PoC demonstrates SQLi via the 'into outfile' technique, but no executable code is provided.

Description

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php.

Exploits (1)

exploitdb WRITEUP
by Manuel García Cárdenas · textwebappsphp
https://www.exploit-db.com/exploits/44277

The document describes a SQL injection vulnerability in Textpattern CMS <= 4.6.2, where the 'qty' parameter in 'index.php' is exploitable via HTTP/1.0. The PoC demonstrates SQLi via the 'into outfile' technique, but no executable code is provided.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Textpattern <= 4.6.2
Auth required
Prerequisites: Administrator authentication · HTTP/1.0 protocol usage
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2018/Mar/34
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44277/

Scores

CVSS v3 9.8
EPSS 0.0659
EPSS Percentile 93.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
textpattern/textpattern < 4.6.2
Published Mar 14, 2018
Tracked Since Feb 18, 2026