SQL Injection Vulnerability in Textpattern CMS 4.6.2 and Earlier

CVE-2018-7474

An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.