CVE-2018-9247
Last modified
CVE-2018-9247 is a vulnerability of currently unknown severity. The upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows remote attackers to execute arbitrary SQL statements via the sql parameter. Consequently, an attacker can execute arbitrary PHP code by placing it after a <?php substring, and then using INTO OUTFILE with a .php filename.. EPSS estimates a 1.58% chance of exploitation in the next 30 days.
Description
The upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows remote attackers to execute arbitrary SQL statements via the sql parameter. Consequently, an attacker can execute arbitrary PHP code by placing it after a <?php substring, and then using INTO OUTFILE with a .php filename.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gxlcms | Gxlcms Qy | 1.0.0713 |
References
- http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-getshell/index.htmlExploit, Third Party Advisory
- http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-getshell/index.htmlExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-9247?
How severe is CVE-2018-9247?
How do I fix CVE-2018-9247?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-9240ncmpc through 0.29 is prone to a NULL pointer dereference fl…7.5
- CVE-2018-9242The PAN-OS management web interface page in PAN-OS 6.1.20 an…
- CVE-2018-9243GitLab Community and Enterprise Editions version 8.4 up to 1…
- CVE-2018-9244GitLab Community and Enterprise Editions version 9.2 up to 1…
- CVE-2018-9245The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injec…
- CVE-2018-9246The PGObject::Util::DBAdmin module before 0.120.0 for Perl, …
- CVE-2018-9248FiberHome VDSL2 Modem HG 150-UB devices allow authentication…
- CVE-2018-9249FiberHome VDSL2 Modem HG 150-UB devices allow authentication…
- CVE-2018-9250interface\super\edit_list.php in OpenEMR before v5_0_1_1 all…
- CVE-2018-9251The xz_decomp function in xzlib.c in libxml2 2.9.8, if --wit…
- CVE-2018-9252JasPer 2.0.14 allows denial of service via a reachable asser…
- CVE-2018-9256In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP d…
Are you affected by CVE-2018-9247?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST