Vulnerability Description
Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attackers can inject SQL code through the lang parameter in login requests to extract sensitive information from the database using time-based blind techniques.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- http://ourenergy.se/
- https://www.exploit-db.com/exploits/45446
- https://www.vulncheck.com/advisories/collectric-cmu-sql-injection-via-lang-param
FAQ
What is CVE-2018-25379?
CVE-2018-25379 is a vulnerability with a CVSS score of 8.2 (HIGH). Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attacker...
How severe is CVE-2018-25379?
CVE-2018-25379 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25379?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.