CVE-2018-18486

CRITICAL · CVSS 9.8 EPSS 1.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-10-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-18486

Severity

CRITICAL

CVSS

9.8

EPSS

1.14%

An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del user_id[] parameter.