CVE-2018-25338

Name of the Vulnerable Software and Affected Versions Zechat version 1.5

Description An issue exists where unauthenticated attackers can extract database information, including table and column names, by using union-based techniques. This is possible through the hashtag parameter. Union-based SQL injection is a technique that uses the UNION operator to combine the results of a malicious query with the results of the original intended query.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.