Home / Vulnerability Intelligence / CVE-2018-25197

CVE-2018-25197 - Vulnerability Analysis

HighCVSS: 8.2

Last Updated: March 6, 2026

PlayJoom - SQL Injection

Published: March 6, 2026Updated: March 6, 2026Remote Exploitable

Overview

PlayJoom 0.10.1 contains an sql injection caused by unsanitized input in the catid parameter in index.php, letting unauthenticated attackers execute arbitrary SQL queries and extract sensitive database information.

Severity & Score

Severity: High

CVSS Score: 8.2

Impact

Unauthenticated attackers can extract sensitive database information including usernames and version details.

Mitigation

Update to the latest version.

References

https://www.exploit-db.com/exploits/45803
https://www.vulncheck.com/advisories/playjoom-sql-injection-via-catid-parameter

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2018-25197
Severity: High
CVSS Score: 8.2
Type: sql_injection
Status: new

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N