VYPR
← All advisories
High severity7.2OSV Advisory· Published Dec 6, 2018· Updated Jun 17, 2026

CVE-2018-19894

CVE-2018-19894

Description

ThinkCMF X2.2.2 has SQL Injection via the functions check() and delete() in CommentadminController.class.php and is exploitable with the manager privilege via the ids[] parameter in a commentadmin action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Thinkcmf/CmfxOSV2 versions
    X2.2.0, X2.2.1, X2.2.2, …+ 1 more
    • (no CPE)range: X2.2.0, X2.2.1, X2.2.2, …
    • (no CPE)range: =2.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.