CVE-2018-1096 - AskarLabs CVE Database

CVE-2018-1096

Vendor Foreman Project

Product Foreman

Weakness CWE-89 · SQLi

Published April 5, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.

Key dates

02Disclosure timeline

April 5, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-1096 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-6230 CVE-2024-7349 LifterLMS <= 7.7.5 - Authenticated (Admin+) SQL Injection CVE-2023-2951 code-projects Bus Dispatch and Information System delete_bus.php sql injection CVE-2019-25391 Ashop Shopping Cart Software Lastest Latest SQL Injection via bannedcustomers.php CVE-2025-8436 projectworlds Online Admission System viewdoc.php sql injection