← All advisories

Critical severity9.8NVD Advisory· Published Oct 11, 2018· Updated Jun 17, 2026

CVE-2018-18242

CVE-2018-18242

Description

youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86.

Affected products

2

Youke365/Youke3652 versions
cpe:2.3:a:youke365:youke_365:1.1.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:youke365:youke_365:1.1.5:*:*:*:*:*:*:*
- (no CPE)range: =1.1.5

Patches

Vulnerability mechanics

References

1

github.com/yanchongchong/swallow/issues/4nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.