Skip to content

CVE-2018-19461 admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.

MediumCVSS 4.8 EPSS 0.92%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.

Affected products

ProductAffected versionsFixed in
phome empirecms <= 7.5.0 No fix listed

References