Critical severity9.8NVD Advisory· Published Jan 2, 2019· Updated Jun 17, 2026

CVE-2018-13045

Description

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yeswiki/Yeswikiinferred2 versions
<= 2018-06-19-1+ 1 more
- (no CPE)range: <= 2018-06-19-1
- (no CPE)range: <=2018-06-19
Yeswiki/Cercopitheque
cpe:2.3:a:yeswiki:cercopitheque:*:*:*:*:*:*:*:*
Range: <=2018-06-19-1

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/46015/nvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/150848/Yeswiki-Cercopitheque-SQL-Injection.htmlnvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000