CVE-2018-11414: Bearadmin Project Bearadmin

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly.

Affected products

• Bearadmin Project Bearadmin: version 0.5 only

Published 2018-05-24. Last modified 2026-06-17.