CVE-2018-14328

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-07-23 · updated 2026-06-17
Weakness: CWE-200

Description

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or /privacy&terms, as demonstrated by reading database username, database password, database_name, and IP address fields, related to CVE-2018-12908.

Affected products

Brynamics Online Trade: all versions

References

https://cxsecurity.com/issue/WLB-2018070175
https://www.exploit-db.com/exploits/45094/
https://cxsecurity.com/issue/WLB-2018070175
https://www.exploit-db.com/exploits/45094/

Get alerted when CVE-2018-14328 or the next vulnerability affects your stack