CVE-2018-25072

MEDIUM

lojban jbovlaste < 2018-06-02 - SQL Injection in dict/listing.html

Title source: llm

Description

A vulnerability classified as critical has been found in lojban jbovlaste. This affects an unknown part of the file dict/listing.html. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The patch is named 6ff44c2e87b1113eb07d76ea62e1f64193b04d15. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217647.

References (3)

Core 3

Core References

Third Party Advisory vdb-entry technical-description

https://vuldb.com/?id.217647

Third Party Advisory signature permissions-required

https://vuldb.com/?ctiid.217647

Patch patch

https://github.com/lojban/jbovlaste/commit/6ff44c2e87b1113eb07d76ea62e1f64193b04d15

View Patch ZIP pw:eip

Scores

CVSS v3 6.3

EPSS 0.0065

EPSS Percentile 46.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-89

Status published

Products (1)

lojban/jbovlaste < 2018-06-02

Published Jan 08, 2023

Tracked Since Feb 18, 2026