CVE-2018-6365: Datacomponents Tsitebuilder

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php.

Affected products

• Datacomponents Tsitebuilder: version 1.0 only

Published 2018-01-29. Last modified 2026-06-17.