cbcvebase.

Wecodex Shipping System Cms vulnerabilities

1 known vulnerability affecting wecodex/shipping_system_cms.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2018-25183P2CRITICALCVSS 9.8v1.02026-03-26
CVE-2018-25183 [CRITICAL] CWE-89 CVE-2018-25183: Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attacker Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit malicious SQL payloads using boolean-based blind techniques in POST requests to the admin login endpoint to authenticate without valid credentials.
nvd
Wecodex Shipping System Cms vulnerabilities | cvebase