AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-6792

HIGH · CVSS 8.8 EPSS 1.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-02-07 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.

CVE
CVE-2018-6792
Severity
HIGH
CVSS
8.8
EPSS
1.09%

Original NVD Description

Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are j_idt118, j_idt120, j_idt122, j_idt124, j_idt126, j_idt128, and j_idt130 under formularioGestionarSecciones:tablaSeccionesMib:*:filter. The GET parameter is nombreAgente.