critical9.8
CVE-2018-14956
CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws.
Impact
CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Isweb | Isweb | Version 3.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/149571/CMS-ISWEB-3.5.3-SQL-Injection.html
- https://cxsecurity.com/issue/WLB-2018090249
- https://imgur.com/a/buXJJKC
- https://exchange.xforce.ibmcloud.com/vulnerabilities/150516
- http://packetstormsecurity.com/files/149571/CMS-ISWEB-3.5.3-SQL-Injection.html
- https://cxsecurity.com/issue/WLB-2018090249
- https://imgur.com/a/buXJJKC