Beveiligingsadvies

CVE-2018-25339

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-17 12:11:42
Laatst bijgewerkt 2026-05-18 17:52:21
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data.