critical9.8Public exploit code
CVE-2018-6365
SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TSiteBuilder 1.0 - SQL Injection2018-01-28 · webapps · php
Impact
SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Datacomponents | Tsitebuilder | Version 1.0 |