Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the order parameter. Attackers can send POST requests to the WsModelGrid.php endpoint with crafted SQL payloads to extract sensitive database information including usernames, databases, and version details.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-06 | 1 | Disclosure1 |
| 2026-03-07 | 1 | General1 |
CVE Alert: CVE-2018-25188 - Github - Webiness Inventory - https://www.redpacketsecurity.com/cve-alert-cve-2018-25188-github-webiness-inventory/ #OSINT #ThreatIntel #CyberSecurity #cve-2018-25188 #github #webiness-inventory
Post summary
The tweet is a brief CVE alert linking to a website but contains no technical details, PoC, exploit code, or mitigation information.
CVE-2018-25188 Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code thro… https://www.cve.org/CVERecord?id=CVE-2018-25188
Post summary
CVE-2018-25188 is an unauthenticated SQL injection that permits arbitrary SQL execution in Webiness Inventory 2.3, with no mention of PoC, exploitation, or available patch.