Not scored
CVE-2018-11511
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
- Associated threat actor: JadeProx
Exploit probabilityEPSSchecked 26 Oct
11%probability of exploitation in the next 30 days
Higher than 95% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a photo-gallery/api/album/tree_lists/ URI.
Coverage 1 article · 1 outlet
- JadeProx spies on Asian, Latin American hospitals and ministriesSecurityOnline · first in our coverage