CVE-2018-5697: Icyphoenix

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to admin_kb_art.php or the order parameter to admin_jr_admin.php, related to functions_kb.php.

Affected products

Published 2018-01-14. Last modified 2026-06-17.