Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-25195. PoCs published by AkkuS.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Wecodex Hotel CMS 1.0's admin login functionality. It includes payloads for boolean-based blind and time-based blind SQL injection attacks.
Description
Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code. Attackers can submit malicious SQL payloads through the username parameter in POST requests to index.php with action=processlogin to extract sensitive database information or gain unauthorized administrative access.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Wecodex Hotel CMS 1.0's admin login functionality. It includes payloads for boolean-based blind and time-based blind SQL injection attacks.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N