Beveiligingsadvies

CVE-2018-25410

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-30 14:55:17

Laatst bijgewerkt 2026-06-01 15:12:41

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to /admin/media.php with module=pengurus and act=editpengurus parameters containing SQL UNION statements to extract database information including usernames, database names, and version details.

← Alle CVE's bekijken Bekijk op cve.org ↗