CVE-2018-5972

9.8 criticalEPSS 19%

Critical (9.8) in quickad project quickad. EPSS 19% chance of exploitation in the next 30 days.

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.

Severity

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2018-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19