Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parameter. Attackers can send GET requests to index.php with option=com_playjoom&view=genre&catid=[SQL] to extract sensitive database information including usernames, databases, and version details.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2018-25197 PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the… https://www.cve.org/CVERecord?id=CVE-2018-25197
Post summary
The content announces an unauthenticated SQL injection flaw in PlayJoom 0.10.1 that permits arbitrary query execution, but provides no evidence of exploitation or remediation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2018-25197 - PlayJoom 0.10.1 SQL Injection via catid Parameter Intel Report: https://ift.tt/J7GHvXN
Post summary
The tweet announces the CVE‑2018‑25197 vulnerability, a SQL injection in PlayJoom 0.10.1 via the catid parameter, and points to an Intel report for details.