Security Advisory

CVE-2018-16410

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-09-03 19:00:00

Last updated 2024-08-05 10:24:32

Assigner mitre

State PUBLISHED

Description

Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/class.invitationmodel.php and applications/dashboard/controllers/class.profilecontroller.php.

← Browse all CVEs View on cve.org ↗