CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter.

• CWE-89

• https://www.exploit-db.com/exploits/43949Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/43949Exploit, Third Party Advisory, VDB Entry

Published

Feb 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6561dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload …
• CVE-2018-6562totemomail Encryption Gateway before 6.0_b567 allows remote …
• CVE-2018-6563Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2018-6569West Wind Web Server 6.x does not require authentication for…
• CVE-2018-6574Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-rele…
• CVE-2018-6575SQL Injection exists in the JEXTN Classified 1.0.0 component…
• CVE-2018-6577SQL Injection exists in the JEXTN Membership 3.1.0 component…
• CVE-2018-6578SQL Injection exists in the JE PayperVideo 3.0.0 component f…
• CVE-2018-6579SQL Injection exists in the JEXTN Reverse Auction 3.1.0 comp…
• CVE-2018-6580Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 …
• CVE-2018-6581SQL Injection exists in the JMS Music 1.1.1 component for Jo…
• CVE-2018-6582SQL Injection exists in the Zh GoogleMap 8.4.0.0 component f…