CVE-2018-25171

🗓️ 06 Mar 2026 12:19:02Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 5 Views🌐 WEB

EdTv 2 allows unauthenticated SQL injection via the id parameter in admin/edit_source with UNION queries.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2018-25171	6 Mar 202612:19	–	attackerkb
Circl	CVE-2018-25171	6 Mar 202614:23	–	circl
CNNVD	EdTv 代码问题漏洞	6 Mar 202600:00	–	cnnvd
Cvelist	CVE-2018-25171 EdTv 2 SQL Injection via id Parameter	6 Mar 202612:19	–	cvelist
EUVD	EUVD-2018-21626	6 Mar 202615:31	–	euvd
NVD	CVE-2018-25171	6 Mar 202613:15	–	nvd
Positive Technologies	PT-2026-23683	6 Mar 202600:00	–	ptsecurity
Vulnrichment	CVE-2018-25171 EdTv 2 SQL Injection via id Parameter	6 Mar 202612:19	–	vulnrichment

Vulners

Node

edtv edtvMatch2.0

[
  {
    "vendor": "Edtv",
    "product": "EdTv",
    "versions": [
      {
        "version": "2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/edtv-sql-injection-via-id-parameter
exploit-db	www.exploit-db.com/exploits/45849

Parameter	Position	Path	Description	CWE
id	query param	admin/edit_source	SQL injection in admin/edit_source via id parameter allowing unauthenticated attackers to execute arbitrary SQL via crafted UNION statements.	CWE-434

15 Apr 2026 14:53Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.18.2

CVSS 48.8

EPSS0.00088

SSVC

CWE-434