Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-11-29	CVE-2018-18619	SQL Injection vulnerability in Advanced Comment System Project Advanced Comment System 1.0 internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter. network low complexity advanced-comment-system-project CWE-89 critical	9.8