CVE Database · CVE-2018-5972
CVSS v3.1
N/A
EPSS
19.15%
Published
Jan 24, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.
Weaknesses (CWE)
Affected Products (1)
References (2)