Security Advisory

CVE-2018-25339

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-17 12:11:42

Last updated 2026-05-18 17:52:21

Assigner VulnCheck

CVSS score 8.8

State PUBLISHED

Description

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data.

← Browse all CVEs View on cve.org ↗