cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2018-18285,https://securityvulnerability.io/vulnerability/CVE-2018-18285,,"SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the login interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.",Mitel,Cmg Suite,9.8,CRITICAL,0.0022799998987466097,false,,false,false,false,,,false,false,,2019-04-25T19:12:13.000Z,0 CVE-2018-18286,https://securityvulnerability.io/vulnerability/CVE-2018-18286,,"SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.",Mitel,Cmg Suite,9.8,CRITICAL,0.0022799998987466097,false,,false,false,false,,,false,false,,2019-04-25T18:57:33.000Z,0 CVE-2018-19275,https://securityvulnerability.io/vulnerability/CVE-2018-19275,,"The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.",Mitel,"Inattend,Cmg Suite",9.8,CRITICAL,0.010610000230371952,false,,false,false,false,,,false,false,,2019-04-02T17:47:36.000Z,0