CVE-2018-25401

The CVE-2018-25401 entry relates to the Open ISES Project 3.30A, where an SQL injection vulnerability in sever_graph.php can be triggered by crafting the p1 parameter in GET requests. Unauthenticated attackers can execute arbitrary SQL queries and extract sensitive data, including database schema...