Security Advisory

CVE-2018-18755

9.8
CRITICAL

Vulnerability Description

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/update user_id parameter.
Published Date November 16, 2018
Official Source NIST NVD Advisory