← All advisories

Critical severity9.8OSV Advisory· Published May 5, 2018· Updated Jun 17, 2026

CVE-2018-10757

CVE-2018-10757

Description

CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a login attempt.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Dukereborn/CmumOSV
Range: v3.0.0
CSP/MySQL User Managerllm-fuzzy
Range: =2.3.1
Csp Mysql User Manager Project/Csp Mysql User Manager
cpe:2.3:a:csp_mysql_user_manager_project:csp_mysql_user_manager:2.3.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

github.com/dukereborn/cmum/commit/c89158ec646c4e8e95587b650f6fd86b502ff8b5nvdPatchThird Party Advisory
packetstormsecurity.com/files/147501/cspmysqlum231-sql.txtnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/44589/nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.