CVE Vulnerability

CWE-89

CVE-2018-19552

by

Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.

CVE-2018-19553

by

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php

CVE-2018-19557

by

An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images.

CVE-2018-19558

by

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php.

CVE-2018-19559

by

CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the reference_id parameter.

CVE-2018-19510

by

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.