Security Advisory
CVE-2018-14501
9.8
CRITICAL
Vulnerability Description
manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.
Published Date
July 22, 2018
Official Source
NIST NVD Advisory