CVE-2020-18746

SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_list.php".

• CWE-89

• https://github.com/kk98kk0/exploit/issues/3Exploit, Issue Tracking, Third Party Advisory
• https://github.com/kk98kk0/exploit/issues/3Exploit, Issue Tracking, Third Party Advisory

Published

Aug 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-18731A segmentation violation in the Iec104_Deal_FirmUpdate funct…7.5
• CVE-2020-18734A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT C…7.5
• CVE-2020-18735A heap buffer overflow in /src/dds_stream.c of Eclipse IOT C…7.5
• CVE-2020-18737An issue was discovered in Typora 0.9.67. There is an XSS vu…6.1
• CVE-2020-1874NIP6800;Secospace USG6600;USG9500 products versions of V500R…5.5
• CVE-2020-18741Improper Authorization in ThinkSAAS v2.7 allows remote attac…5.3
• CVE-2020-18748Cross Site Scripting (XSS) in Typora v0.9.65 allows attacker…6.1
• CVE-2020-1875NIP6800;Secospace USG6600;USG9500 products versions of V500R…5.5
• CVE-2020-18750Buffer overflow in pdf2json 0.69 allows local users to execu…7.8
• CVE-2020-18753An issue in Dut Computer Control Engineering Co.'s PLC MAC11…9.8
• CVE-2020-18754An information disclosure vulnerability exists within Dut Co…7.5
• CVE-2020-18756An arbitrary memory access vulnerability in the EPA protocol…7.5