PT-2026-23705 · Unknown · Serverzilla
CVE-2018-25196
·
Publicado
2026-03-06
·
Atualizado
2026-03-06
CVSS v3.1
8.2
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
ServerZilla version 1.0
Description
ServerZilla version 1.0 contains an SQL injection issue that allows unauthenticated attackers to manipulate database queries. Attackers can send POST requests to the ''reset.php'' endpoint with malicious values in the
email parameter, containing SQL operators. This allows them to bypass authentication and extract sensitive database information.Recommendations
Apply a fix to sanitize the
email parameter in the ''reset.php'' endpoint to prevent SQL injection.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Serverzilla