Skip to main content

Openbiz Cubi Lite

1 CVEs product

Monthly

CVE-2018-25209 Mar 26, 11:39 HIGH POC This Week

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Openbiz Cubi Lite Sourceforge
NVD Exploit-DB
CVSS 4.0
8.8
EPSS
0.2%
EPSS 0% CVSS 8.8
HIGH POC This Week

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Openbiz Cubi Lite +1
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy