CVE-2018-14418

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• MSVOD 10 - 'cid' SQL Injection2018-07-20 · webapps · php

Impact

In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.exploit-db.com/exploits/45062/
• https://www.wtfsec.org/2583/msvod-v10-sql-injection/
• https://www.exploit-db.com/exploits/45062/
• https://www.wtfsec.org/2583/msvod-v10-sql-injection/