CyberRota
Back to database

CVE-2018-25319

HIGH · CVSS 7.1 EPSS 0.27% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-17 · Last synced: 2026-06-16

CyberRota Analysis

SQL Injection riski içeriyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗
External Security References
exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-25319
Severity
HIGH
CVSS
7.1
EPSS
0.27%

Original NVD Description

Redaxo CMS Addon MyEvents 2.2.1 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the myevents_id parameter. Attackers can send GET requests to the event_add.php page with malicious myevents_id values to extract or modify sensitive database information.