nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-25257 CVE-2018-25257
HIGH
Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile
Record summary
CVE-2018-25257 has a selected CVSS score of 7.1 (high); EIP currently links 1 catalogued exploit.
Description
Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name field in SystemProfileForm. Attackers can submit crafted SQL statements in the profile edit endpoint to modify user credentials and gain administrative access.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 13, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Adianti FrameworkBrowse adianti / Adianti Framework | CVE List | 5.5.0 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBAdianti Framework 5.5.0 - SQL InjectionExploitDB exploitby Joner de Mello AssolinNot analyzed1 file
References
3ExploitDB-46217exploit
https://www.exploit-db.com/exploits/46217 VulnCheck Advisory: Adianti Framework 5.5.0 and 5.6.0 SQL Injection via ProfileThird-party advisory
https://www.vulncheck.com/advisories/adianti-framework-and-sql-injection-via-profile