CVE-2018-17843

Published: May 24, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0 via the member/readmsg.php msg_id parameter, the member/tree.php pid parameter, or the member/downline.php m_id parameter.

Affected (10)

Products: Mlmsoftwarez: Add Clicking Mlm Software, Autopool Mlm Software, Bidding Mlm Software, Binary Mlm Software, Gift Mlm Software, Investmen Mlm Software, Level Mlm Software, Moneyorder Mlm Software, Repurchase Mlm Software, Singleleg Mlm Software

Mlmsoftwarez

10 products

Add Clicking Mlm Software

Autopool Mlm Software

Bidding Mlm Software

Binary Mlm Software

Gift Mlm Software

Investmen Mlm Software

Level Mlm Software

Moneyorder Mlm Software

Repurchase Mlm Software

Singleleg Mlm Software

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Mlmsoftwarez Add Clicking Mlm Software	Version 1.0
Mlmsoftwarez Autopool Mlm Software	Version 1.0
Mlmsoftwarez Bidding Mlm Software	Version 1.0
Mlmsoftwarez Binary Mlm Software	Version 1.0
Mlmsoftwarez Gift Mlm Software	Version 1.0
Mlmsoftwarez Investmen Mlm Software	Version 1.0
Mlmsoftwarez Level Mlm Software	Version 1.0
Mlmsoftwarez Moneyorder Mlm Software	Version 1.0
Mlmsoftwarez Repurchase Mlm Software	Version 1.0
Mlmsoftwarez Singleleg Mlm Software	Version 1.0