CVE-2018-25167Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit malicious SQL code through the login POST parameter to extract database information including usernames, passwords, and system credentials.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-06); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-06: 1Mentions · 2026-03-07: 1Technical Details · 2026-03-06: 103-0603-07
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-061
Disclosure1
2026-03-071
General1
Full discourse2 posts
  • RedPacket Security@RedPacketSec
    General

    CVE Alert: CVE-2018-25167 - Net-Billetterie - Billetterie - https://www.redpacketsecurity.com/cve-alert-cve-2018-25167-net-billetterie-billetterie/ #OSINT #ThreatIntel #CyberSecurity #cve-2018-25167 #net-billetterie #billetterie

    Post summary

    The post simply announces the existence of CVE‑2018‑25167 and links to a source for further information, without providing technical or exploit details.

    0000077
    3.5K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2018-25167 Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of http://login.inc.php that allows unauthenticated attackers to execute arbitrary SQL que… https://www.cve.org/CVERecord?id=CVE-2018-25167

    Post summary

    The tweet announces a SQL injection flaw (CVE‑2018‑25167) in Net‑Billetterie 2.9’s login.inc.php, allowing unauthenticated attackers to run arbitrary SQL commands.

    00000112
    56.6K followersView on X

Explore more