Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2026/03/27 5:09 p.m.•12 views

CVE-2018-25209

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

8.8CVSS6.1AI score0.00327EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/26 12:30 p.m.•16 views

EUVD-2018-21677

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

8.8CVSS6AI score0.00327EPSS
SaveExploits0References5
NVD
NVD
•added 2026/03/26 12:16 p.m.•17 views

CVE-2018-25209

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

8.8CVSS0.00327EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/26 11:39 a.m.•20 views

CVE-2018-25209

OpenBiz Cubi Lite 3.0.8 contains a SQL injection in the login form. An unauthenticated attacker can submit POST requests to /bin/controller.php with malicious SQL in the username field to manipulate queries, potentially extract sensitive database information or bypass authentication. The CVE is d...

8.8CVSS6AI score0.00327EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/26 11:39 a.m.•14 views

CVE-2018-25209

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

8.8CVSS6AI score0.00327EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/03/26 11:39 a.m.•40 views

CVE-2018-25209 OpenBiz Cubi Lite 3.0.8 SQL Injection via username Parameter

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

8.8CVSS0.00327EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•14 views

PT-2026-28246

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

8.8CVSS6.1AI score0.00327EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•0 views

CVE-2018-25209: Improper Neutralization of Special Elements used in an SQL Command

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract...

8.8CVSS5.8AI score0.00327EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/02/02 12:00 a.m.•9 views

Openbiz Cubi SQL Injection

Multiple SQL injection vulnerabilities exist in Openbiz Cubi. These vulnerabilities allow remote attackers to execute arbitrary SQL commands and potentially compromise the entire database. This issue is older research added to the archive...

6.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/02/02 12:00 a.m.•13 views

Openbiz Cubi Cross Site Scripting

Multiple cross site scripting vulnerabilities exist in Openbiz Cubi. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. This issue is older research added to the archive...

5.2AI score
SaveExploits0
zdt
zdt
•added 2018/11/07 12:00 a.m.•286 views

OpenBiz Cubi Lite 3.0.8 - username SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link:...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/11/07 12:00 a.m.•209 views

OpenBiz Cubi Lite 3.0.8 SQL Injection

Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Date: 2018-11-05 Exploit Author: Azkan Mustafa AkkuA AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link: https://sourceforge.net/projects/bigchef/files/latest/download...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/11/06 12:00 a.m.•34 views

OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection

Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Date: 2018-11-05 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link: https://sourceforge.net/projects/bigchef/files/latest/download...

5.3AI score
SaveExploits0
Rows per page
Query Builder