What’s Vulnerable › Vulnerabilities

CVE-2018-19461

• Severity: medium (CVSS 4.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-06-07 · updated 2026-06-17
• Weakness: CWE-79

Description

admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.

Affected products

• EmpireSoft EmpireCMS: through 7.5.0

References

• http://i.3001.net/uploads/Up_imgs/20181117-95a316d46f9a46dda7c48e541777d1fc.png%21small
• http://i.3001.net/uploads/Up_imgs/20181117-ce3d7d20372096011393bfda0d6f9d07.png%21small
• https://github.com/novysodope/empireCMS7.5
• http://i.3001.net/uploads/Up_imgs/20181117-95a316d46f9a46dda7c48e541777d1fc.png%21small
• http://i.3001.net/uploads/Up_imgs/20181117-ce3d7d20372096011393bfda0d6f9d07.png%21small
• https://github.com/novysodope/empireCMS7.5

Get alerted when CVE-2018-19461 or the next vulnerability affects your stack