CVE-2018-25379 – Collectric CMU 1.0 SQL Injection via lang Parameter

​CVE ID :CVE-2018-25379

Published : May 25, 2026, 2:15 p.m. | 5 hours, 18 minutes ago

Description :Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication. Attackers can inject SQL code through the lang parameter in login requests to extract sensitive information from the database using time-based blind techniques.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More