CVE-2018-18619: Advanced Comment System Project Advanced Comment System

Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days.

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter. NOTE: The product is discontinued.

Affected products

• Advanced Comment System Project Advanced Comment System: version 1.0 only

Published 2018-11-29. Last modified 2026-06-17.