CVE-2018-13850

The "Firebase Cloud Messaging (FCM) + Advance Admin Panel" component supporting Firebase Push Notification on iOS (through 2017-10-26) allows SQL injection via the /advance_push/public/login username parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-07-10

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Firebase Push Notification On Ios / Fcm + Advance Admin Panel (Icanstudioz)

References

• https://cxsecurity.com/issue/WLB-2018070096