VYPR
← All advisories
High severity8.8OSV Advisory· Published Dec 6, 2018· Updated Jun 17, 2026

CVE-2018-19898

CVE-2018-19898

Description

ThinkCMF X2.2.2 has SQL Injection via the method edit_post in ArticleController.class.php and is exploitable by normal authenticated users via the post[id][1] parameter in an article edit_post action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Thinkcmf/CmfxOSV2 versions
    X2.2.0, X2.2.1, X2.2.2, …+ 1 more
    • (no CPE)range: X2.2.0, X2.2.1, X2.2.2, …
    • (no CPE)range: = 2.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.