Sourceforge Vulnerabilities and Affected Products
Vulnerabilities associated with Data Center Audit.
Products
Clear product- 202CMS2 vulnerabilities
- Data Center Audit2 vulnerabilities
- Easyndexer2 vulnerabilities
- Echo Mirage1 vulnerability
- GPS Tracking System1 vulnerability
- Meneame English Pligg1 vulnerability
- OpenBiz Cubi Lite1 vulnerability
- phpFileManager1 vulnerability
- Placeto CMS1 vulnerability
- SimplePress CMS1 vulnerability
- Snes9K 0.0.9z1 vulnerability
- SoX - Sound eXchange1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2018-25189HIGH | Data Center Audit 2.6.2 SQL Injection via username ParameterData Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive database information including usernames, database names, and version details. CWE-89Mar 6, 2026 | CVSS8.8v4.0 | EPSS0.237% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-25177MEDIUM | Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.phpData Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting crafted POST requests. Attackers can send requests to dca_resetpw.php with parameters updateuser, pass, pass2, and submit_reset to change the admin account password and gain administrative access. CWE-352Mar 6, 2026 | CVSS6.9v4.0 | EPSS0.125% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |