CVE-2018-12250

An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL injection.

• CWE-89

• http://elitecms.net/download.phpProduct, Vendor Advisory
• https://cxsecurity.com/issue/WLB-2018060157Exploit, Third Party Advisory
• http://elitecms.net/download.phpProduct, Vendor Advisory
• https://cxsecurity.com/issue/WLB-2018060157Exploit, Third Party Advisory

Published

Jul 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12245Symantec Endpoint Protection prior to 14.2 MP1 may be suscep…
• CVE-2018-12246Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is suscept…
• CVE-2018-12247An issue was discovered in mruby 1.4.1. There is a NULL poin…
• CVE-2018-12248An issue was discovered in mruby 1.4.1. There is a heap-base…
• CVE-2018-12249An issue was discovered in mruby 1.4.1. There is a NULL poin…7.5
• CVE-2018-1225Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12254router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 comp…
• CVE-2018-12255An XSS issue was discovered in InvoicePlane 1.5.10 via the "…
• CVE-2018-12256admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 all…
• CVE-2018-12257An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-12258An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-12259An issue was discovered on Momentum Axel 720P 5.1.8 devices.…