CVE-2018-6893

CRITICAL · CVSS 9.8 EPSS 2.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-02-12 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-6893

Severity

CRITICAL

CVSS

9.8

EPSS

2.50%

Original Filing — NVD Description

controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and the parameter 'module' with a SQL statement, lacks effective filtering.