CVE-2018-18075

WikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the index.php?action=search select_sort parameter.

• CWE-89

• https://seccops.com/wikidforum-2-20-multiple-sql-injection-vulnerabilities/Third Party Advisory
• https://www.exploit-db.com/exploits/45564/Exploit, Third Party Advisory, VDB Entry
• https://seccops.com/wikidforum-2-20-multiple-sql-injection-vulnerabilities/Third Party Advisory
• https://www.exploit-db.com/exploits/45564/Exploit, Third Party Advisory, VDB Entry

Published

Oct 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18068The ARM-based hardware debugging feature on Raspberry Pi 3 m…
• CVE-2018-18069process_forms in the WPML (aka sitepress-multilingual-cms) p…
• CVE-2018-18070An issue was discovered in Daimler Mercedes-Benz COMAND 17/1…5.9
• CVE-2018-18071An issue was discovered in the Daimler Mercedes-Benz Me app …
• CVE-2018-18073Artifex Ghostscript allows attackers to bypass a sandbox pro…6.3
• CVE-2018-18074The Requests package before 2.20.0 for Python sends an HTTP …7.5
• CVE-2018-1808IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow s…4.3
• CVE-2018-18082XSS exists in Waimai Super Cms 20150505 via the fname parame…
• CVE-2018-18083An issue was discovered in DuomiCMS 3.0. Remote PHP code exe…
• CVE-2018-18084An issue was discovered in DuomiCMS 3.0. SQL injection exist…9.8
• CVE-2018-18086EmpireCMS v7.5 has an arbitrary file upload vulnerability in…
• CVE-2018-18087The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logg…