Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the admin/edit_source endpoint with crafted SQL UNION statements to extract database information including schema names, user credentials, and version details.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-06 | 1 | Disclosure1 |
| 2026-03-07 | 1 | General1 |
CVE Alert: CVE-2018-25171 - Edtv - EdTv - https://www.redpacketsecurity.com/cve-alert-cve-2018-25171-edtv-edtv/ #OSINT #ThreatIntel #CyberSecurity #cve-2018-25171 #edtv #
Post summary
The post announces a CVE (CVE‑2018‑25171) but provides no additional details, proofs of concept, or exploit information.
CVE-2018-25171 EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' par… https://www.cve.org/CVERecord?id=CVE-2018-25171
Post summary
The tweet discloses that CVE-2018-25171 is an SQL injection in EdTv 2 enabling unauthenticated attackers to execute arbitrary SQL via the 'id' parameter.