critical9.8Public exploit code
CVE-2018-11535
An issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sitemakin SLAC 1.0 - 'my_item_search' SQL Injection2018-05-29 · webapps · php
Impact
An issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0. The parameter "my_item_search" in users.php is exploitable using SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitemakin | Slac | Version 1.0 |