Beveiligingsadvies

CVE-2018-25362

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-25 14:15:09
Laatst bijgewerkt 2026-05-26 15:22:40
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information including usernames, passwords, and database credentials.