CVE-2018-25175 - Vulnerability Analysis
HighCVSS: 8.2Last Updated: March 6, 2026
Alienor Web Libre - SQL Injection
Published: March 6, 2026Updated: March 6, 2026Remote Exploitable
Overview
Alienor Web Libre 2.0 contains an sql injection caused by unsanitized input in the identifiant parameter in index.php, letting unauthenticated attackers execute arbitrary SQL queries and extract sensitive database information, exploit requires crafted POST requests.
Severity & Score
Severity: High
CVSS Score: 8.2
Impact
Unauthenticated attackers can execute arbitrary SQL queries to extract sensitive database information, compromising data confidentiality and integrity.
Mitigation
Update to the latest version.
References
Related Resources
Details
- CVE ID
- CVE-2018-25175
- Severity
- High
- CVSS Score
- 8.2
- Type
- sql_injection
- Status
- new
CWE
- CWE-89
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N