CVE-2018-17988

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.

• CWE-89

• https://github.com/AndyRixon/LayerBB/issues/51Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45530/Exploit, Third Party Advisory, VDB Entry
• https://github.com/AndyRixon/LayerBB/issues/51Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45530/Exploit, Third Party Advisory, VDB Entry

Published

Mar 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17981Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS v…6.1
• CVE-2018-17983cext/manifest.c in Mercurial before 4.7.2 has an out-of-boun…
• CVE-2018-17984An unanchored /[a-z]{2}/ regular expression in ISPConfig bef…
• CVE-2018-17985An issue was discovered in cp-demangle.c in GNU libiberty, a…
• CVE-2018-17986rars/user/data in razorCMS 3.4.8 allows CSRF for changing th…
• CVE-2018-17987The determineWinner function of a smart contract implementat…
• CVE-2018-17989A stored XSS vulnerability exists in the web interface on D-…
• CVE-2018-1799IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…6.2
• CVE-2018-17990An issue was discovered on D-Link DSL-3782 devices with firm…
• CVE-2018-17996LayerBB before 1.1.3 allows CSRF for adding a user via admin…
• CVE-2018-17997LayerBB 1.1.1 allows XSS via the titles of conversations (PM…
• CVE-2018-1800IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2…5.1