CVE-2018-17048

admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows SQL Injection.

• CWE-89

• http://www.cnvd.org.cn/flaw/show/CNVD-2018-19263Third Party Advisory
• http://www.fangfacms.com/Product
• https://github.com/badongdyc/fangfacms/commits/masterPatch, Third Party Advisory
• http://www.cnvd.org.cn/flaw/show/CNVD-2018-19263Third Party Advisory
• http://www.fangfacms.com/Product
• https://github.com/badongdyc/fangfacms/commits/masterPatch, Third Party Advisory

Published

May 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1704IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spect…6.8
• CVE-2018-17042An issue has been found in dbf2txt through 2012-07-19. It is…
• CVE-2018-17043An issue has been found in doc2txt through 2014-03-19. It is…
• CVE-2018-17044In YzmCMS 5.1, stored XSS exists via the admin/system_manage…
• CVE-2018-17045An issue was discovered in CMS MaeloStore V.1.5.0. There is …
• CVE-2018-17046translate man before 2018-08-21 has XSS via containers/outpu…
• CVE-2018-17049CQU-LANKERS through 2017-11-02 has XSS via the public/api.ph…
• CVE-2018-1705IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spect…6.5
• CVE-2018-17050The mintToken function of a smart contract implementation fo…
• CVE-2018-17051K-Net Cisco Configuration Manager through 2014-11-19 has XSS…
• CVE-2018-17053Cross-site scripting (XSS) vulnerability in Identity Server …
• CVE-2018-17054Cross-site scripting (XSS) vulnerability in Identity Server …