Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retrieve schema names and sensitive database data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE Alert: CVE-2018-25173 - Sms - Rmedia SMS - https://www.redpacketsecurity.com/cve-alert-cve-2018-25173-sms-rmedia-sms/ #OSINT #ThreatIntel #CyberSecurity #cve-2018-25173 #sms #rmedia-sms
Post summary
A brief CVE alert is posted, pointing to an external URL for details, but no actionable exploit, patch, or technical specifics are included.
CVE-2018-25173 Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid par… https://www.cve.org/CVERecord?id=CVE-2018-25173
Post summary
The post announces that Rmedia SMS 1.0 has an unauthenticated SQL injection (CVE‑2018‑25173) allowing data extraction via the gid parameter, but offers no proof‑of‑concept, exploit code, or patch details.