Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the identifiant parameter. Attackers can submit crafted POST requests to index.php with SQL injection payloads in the identifiant field to extract sensitive database information including usernames, databases, and version details.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE Alert: CVE-2018-25175 - Alienor - Alienor Web Libre - https://www.redpacketsecurity.com/cve-alert-cve-2018-25175-alienor-alienor-web-libre/ #OSINT #ThreatIntel #CyberSecurity #cve-2018-25175 #alienor #alienor-web-libre
Post summary
The tweet simply provides a link to a CVE alert page for CVE-2018-25175 (Alienor Web Libre) without offering additional information such as PoC, exploitation evidence, or patch details.
CVE-2018-25175 Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu… https://www.cve.org/CVERecord?id=CVE-2018-25175
Post summary
The passage notes that CVE-2018-25175 is an unauthenticated SQL injection flaw in Alienor Web Libre 2.0, but it provides no evidence of exploitation, fixes, or PoC availability.