CVE-2018-11414

An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-05-24

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Bearadmin (Bearadmin Project)

References

• https://github.com/yupoxiong/BearAdmin/issues/5