Vulnerabilities > Advanced Comment System Project > Advanced Comment System > Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-11-29	CVE-2018-18619	SQL Injection vulnerability in Advanced Comment System Project Advanced Comment System 1.0 internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter. network low complexity advanced-comment-system-project CWE-89 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.