Security Advisory

CVE-2018-13045

9.8
CRITICAL

Vulnerability Description

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter.
Published Date January 2, 2019
Official Source NIST NVD Advisory