CVE-2018-12498: SQL Injection
Published Jun 15, 2018
·Updated
spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php.
Affected Software
1 affected component
icmsdev icms=7.0.8
Event History
Jun 15, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-12498.
2
What software is affected by this vulnerability?
iCMS v7.0.8 is affected by this vulnerability.
3
How severe is this vulnerability?
This vulnerability is classified as critical with a severity value of 9.8.
4
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-89.
5
How can I fix this vulnerability?
To fix this vulnerability, update iCMS to a version that does not have this vulnerability.