CVE-2018-12630

NEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via the sect_id parameter to the /catalog URI.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-06-21

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Nmcms (Nmark)

References

• https://www.exploit-db.com/exploits/44911/