TI-2018-11660 CVE-2018-16278 · GHSA-9qgm-4jf7-rwpxphpkaiyuancms PhpOpenSourceCMS (POSCMS) V3.2.0 allows an unauthenticated user to execute…Priority MEDIUM 45phpkaiyuancms PhpOpenSourceCMS (POSCMS) V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/controllers/Api.php ajax_save_draft function with the dir parameter.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01582 · Published 2018-08-31 · No fix listed CWE-89