TI-2017-13379 CVE-2017-18194 · GHSA-x9x6-vggp-c8fqSQL injection vulnerability in users/signup.php in the "signup" component in…Priority MEDIUM 45SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01426 · Published 2018-02-22 · No fix listed CWE-89