Newpk
1 CVEs
product
Monthly
SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
SQLi
Newpk
NVD
GitHub
CVSS 3.1
9.8
EPSS
1.1%
EPSS 1%
CVSS 9.8
CRITICAL
POC
Act Now
SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
SQLi
Newpk
NVD
GitHub