SQL Injection Vulnerability in Kentico Web Content Management System
CVE-2018-6843

7.2HIGH

Key Information:

Vendor

Kentico

Status
Kentico Cms
Vendor
CVE Published:
19 March 2018

What is CVE-2018-6843?

Kentico CMS versions 10 prior to 10.0.50 and 11 prior to 11.0.3 are susceptible to a SQL injection vulnerability within the administration interface. This flaw may allow an attacker to manipulate SQL queries, potentially leading to unauthorized access to sensitive information or executing harmful operations within the database. It is essential for users of the affected versions to implement security measures and apply the necessary updates to mitigate the risk associated with this vulnerability.

References

https://gist.github.com/zamous/c0afd7e21f3111de873c7bef6d...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-6843 : SQL Injection Vulnerability in Kentico Web Content Management System