CVE-2018-12630

NEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via the sect_id parameter to the /catalog URI.

• CWE-89

• https://www.exploit-db.com/exploits/44911/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44911/Exploit, Third Party Advisory, VDB Entry

Published

Jun 21, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12624An issue was discovered in Eventum 3.5.0. /htdocs/post_note.…
• CVE-2018-12625An issue was discovered in Eventum 3.5.0. /htdocs/validate.p…
• CVE-2018-12626An issue was discovered in Eventum 3.5.0. /htdocs/popup.php …
• CVE-2018-12627An issue was discovered in Eventum 3.5.0. /htdocs/list.php h…
• CVE-2018-12628An issue was discovered in Eventum 3.5.0. CSRF in htdocs/man…
• CVE-2018-1263Addresses partial fix in CVE-2018-1261. Pivotal spring-integ…4.7
• CVE-2018-12631Redatam7 (formerly Redatam WebServer) allows remote attacker…
• CVE-2018-12632Redatam7 (formerly Redatam WebServer) allows remote attacker…
• CVE-2018-12633An issue was discovered in the Linux kernel through 4.17.2. …
• CVE-2018-12634CirCarLife Scada before 4.3 allows remote attackers to obtai…9.8
• CVE-2018-12635CirCarLife Scada v4.2.4 allows unauthorized upgrades via req…
• CVE-2018-12636The iThemes Security (better-wp-security) plugin before 7.0.…