Security Advisory

CVE-2018-25338

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-17 12:11:41

Last updated 2026-05-18 17:53:20

Assigner VulnCheck

CVSS score 8.8

State PUBLISHED

Description

Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names.

← Browse all CVEs View on cve.org ↗