CVE-2018-25338 – Zechat 1.5 SQL Injection via hashtag parameter

​CVE ID :CVE-2018-25338

Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago

Description :Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More