CVE-2018-16659
Public Exploits 1
ExploitDB · 1 EDB-45500 [webapps]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-16659
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Rausoft ID.prove SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rausoft ID.prove是一款名单审核模块。该模块能够根据黑名单审核公司客户、供应商和员工信息并进行跟踪。 Rausoft ID.prove 2.95版本中的login页面存在SQL注入漏洞。远程攻击者可借助堆叠查询利用该漏洞执行任意的SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-16659
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-16659
请登录查看更多情报信息。
Same Patch Batch · n/a · 2018-09-28 · 38 CVEs total
| CVE-2018-17382 | Joomla! Jobs Factory组件SQL注入漏洞 | |
| CVE-2018-16587 | Open Ticket Request System 安全漏洞 | |
| CVE-2018-17055 | Progress Sitefinity CMS 安全漏洞 | |
| CVE-2018-17056 | Progress Sitefinity CMS 跨站脚本漏洞 | |
| CVE-2018-17375 | Joomla! Music Collection组件SQL注入漏洞 | |
| CVE-2018-17376 | Joomla! Reverse Auction Factory组件SQL注入漏洞 | |
| CVE-2018-17377 | Joomla! Questions组件SQL注入漏洞 | |
| CVE-2018-17378 | Joomla! Penny Auction Factory组件SQL注入漏洞 | |
| CVE-2018-17379 | Joomla! Raffle Factory组件SQL注入漏洞 | |
| CVE-2018-17380 | Joomla! Article Factory Manager组件SQL注入漏洞 | |
| CVE-2018-16586 | Open Ticket Request System 输入验证错误漏洞 | |
| CVE-2018-17383 | Joomla! Collection Factory组件SQL注入漏洞 | |
| CVE-2018-17384 | Joomla! Swap Factory组件SQL注入漏洞 | |
| CVE-2018-17385 | Joomla! Social Factory组件SQL注入漏洞 | |
| CVE-2018-17391 | Super Cms Blog Pro SQL注入漏洞 | |
| CVE-2018-17394 | Joomla! Timetable Schedule组件SQL注入漏洞 | |
| CVE-2018-17397 | Joomla! AlphaIndex Dictionaries组件SQL注入漏洞 | |
| CVE-2018-17567 | Jekyll 安全漏洞 | |
| CVE-2018-17581 | Exiv2 安全漏洞 | |
| CVE-2018-17609 | Foxit Reader和PhantomPDF 安全漏洞 |
Showing top 20 of 38 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-16659
No comments yet