CVE-2018-5697 Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to admin_kb_art.php or the order parameter to admin_jr_admin.php, related to functions_kb.php.
HighCVSS 7.2
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to admin_kb_art.php or the order parameter to admin_jr_admin.php, related to functions_kb.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icyphoenix | = 2.2.0.105 | No fix listed |
References
- www.vulnerability-lab.com exploit third-party-advisory