CVE-2018-18242: YOUKE365 Youke 365

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86.

Affected products

• YOUKE365 Youke 365: version 1.1.5 only

Published 2018-10-11. Last modified 2026-06-17.