Description
SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter.
Unscored
CVE-2018-18399
EUVD-2018-10128GHSA-g6g7-5qcm-v954
SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attack…
Published Dec 20, 2018 · Updated Aug 5, 2024 · Assigned by mitre