CVEvulnerability

CVE-2018-17843

9.8 CRITICAL Published 2019-05-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-89

Description

SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0 via the member/readmsg.php msg_id parameter, the member/tree.php pid parameter, or the member/downline.php m_id parameter.

Affected configurations

• mlmsoftwarez add clicking mlm software 1.0 • mlmsoftwarez autopool mlm software 1.0 • mlmsoftwarez bidding mlm software 1.0 • mlmsoftwarez binary mlm software 1.0 • mlmsoftwarez gift mlm software 1.0 • mlmsoftwarez investmen mlm software 1.0 • mlmsoftwarez level mlm software 1.0 • mlmsoftwarez moneyorder mlm software 1.0 • mlmsoftwarez repurchase mlm software 1.0 • mlmsoftwarez singleleg mlm software 1.0

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References