CVE-2018-19510: Ens Webgalamb

Critical severity, CVSS 9.8. EPSS: 20% chance of exploitation in the next 30 days.

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.

Affected products

• Ens Webgalamb: up to and including 7.0

Published 2019-03-21. Last modified 2026-06-17.