CVE-2018-7474
NONE EPSS 93.0%
Published Mar 14, 20188y ago · Modified Jun 17, 20262w ago
Published Mar 14, 2018 8y ago
Last Modified Jun 17, 2026 2w ago
Description
An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php.
Threat Intelligence
EPSS Exploit Probability
93.0% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-89 SQL Injection Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| textpattern | textpattern | * | ≤4.6.2 |
References 2
- seclists.org http://seclists.org/fulldisclosure/2018/Mar/34
- exploit-db.com https://www.exploit-db.com/exploits/44277/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.