TI-2018-13015 CVE-2018-18399 · GHSA-g6g7-5qcm-v954SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in…Priority MEDIUM 47SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0277 · Published 2018-12-20 · No fix listed CWE-89