SQL Injection in Mlmsoftwarez Add Clicking Mlm Software
CVE-2018-17843
SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0 via the member/readmsg.php msg_id parameter, the member/tree.php pid parameter, or the member/downline.php m_id parameter.
Vulnerability class: SQL Injection
EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Mlmsoftwarez Add_clicking_mlm_software — versions 1.0
- Mlmsoftwarez Autopool_mlm_software — versions 1.0
- Mlmsoftwarez Bidding_mlm_software — versions 1.0
- Mlmsoftwarez Binary_mlm_software — versions 1.0
- Mlmsoftwarez Gift_mlm_software — versions 1.0
- Mlmsoftwarez Investmen_mlm_software — versions 1.0
- Mlmsoftwarez Level_mlm_software — versions 1.0
- Mlmsoftwarez Moneyorder_mlm_software — versions 1.0
- Mlmsoftwarez Repurchase_mlm_software — versions 1.0
- Mlmsoftwarez Singleleg_mlm_software — versions 1.0
Weakness classification (CWE)
References
- cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-17843?
- CVE-2018-17843 is a critical-severity vulnerability in Mlmsoftwarez Add Clicking Mlm Software, classified under SQL Injection. CVSS score: 9.8/10. Published 2019-05-24.
- How severe is CVE-2018-17843?
- Critical severity. CVSS v3 base score is 9.8 out of 10.