CVE-2018-18488

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-10-18

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Gxlcms (Gxlcms)

References

• http://sunu11.com/2018/10/18/glxcms/