CVE-2019-6708

PHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter.

• CWE-89

• https://github.com/kk98kk0/exploit/issues/2Exploit, Issue Tracking, Third Party Advisory
• https://github.com/kk98kk0/exploit/issues/2Exploit, Issue Tracking, Third Party Advisory

Published

Jan 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6699An improper neutralization of input vulnerability in Fortine…5.4
• CVE-2019-6700An information exposure vulnerability in the external authen…6.5
• CVE-2019-6702The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL…
• CVE-2019-6703Incorrect access control in migla_ajax_functions.php in the …
• CVE-2019-6706Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c.…7.5
• CVE-2019-6707PHPSHE 1.7 has SQL injection via the admin.php?mod=product&a…
• CVE-2019-6710Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CS…
• CVE-2019-6713app\admin\controller\RouteController.php in ThinkCMF 5.0.190…
• CVE-2019-6714An issue was discovered in BlogEngine.NET through 3.3.6.0. A…
• CVE-2019-6715pub/sns.php in the W3 Total Cache plugin before 0.9.4 for Wo…7.5
• CVE-2019-6716An unauthenticated Insecure Direct Object Reference (IDOR) i…
• CVE-2019-6719An issue has been found in libIEC61850 v1.3.1. There is a us…