Skip to content
Threat Feed

Product

Portal

2 briefs RSS
critical threat

eNdonesia Portal 8.7 SQL Injection Vulnerabilities

eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities allowing unauthenticated attackers to execute arbitrary SQL queries via crafted parameters in mod.php.

Portal sql-injection web-application
2r 1t 1c
critical threat

eNdonesia Portal 8.7 SQL Injection Vulnerability (CVE-2018-25406)

eNdonesia Portal 8.7 is vulnerable to SQL injection (CVE-2018-25406), allowing unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through specific parameters, potentially leading to data exfiltration.

Portal sql-injection cve-2018-25406 web-application
2r 1t 1c