PT-2018-17506 · Task Rabbit · Task Rabbit Clone

Ihsan Sencan

·

CVE-2018-6363

·

Published

2018-01-29

·

Updated

2020-03-11

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Task Rabbit Clone version 1.0
Description The issue exists due to SQL Injection in the single blog.php file, specifically via the id parameter.
Recommendations For Task Rabbit Clone version 1.0, consider restricting access to the single blog.php file or avoiding the use of the id parameter until a fix is available.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-6363

Affected Products

Task Rabbit Clone