Skip to content
Sign in
9.8 Critical

CVE-2018-12470 A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary…

Description

A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Affected products and versions

Product Affected versions Fixed in
SMT 3.0 earliest → < 3.0.37 3.0.37

Other CVEs of SMT

The 3 CVEs of SMT →
CVE-2018-12471 A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server… 6.5 Medium CVE-2018-12472 A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server 7.3 High
Track this CVE