CVE-2018-25428
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
SQL Injection vulnerability in Paroiciel 11.20, allowing unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the tRecIdListe parameter. Attackers can send GET requests to trec.php.
Risk Assessment
The risk involves extracting database structure information, including table and column names, which can facilitate further attacks.
Recommendation
Immediately update Paroiciel to a version above 11.20 and apply input validation for the tRecIdListe parameter.
Other vulnerabilities in Paroiciel
See all- CVE-2018-25430High
Paroiciel 11.20 contains an SQL injection vulnerability in the eGeqIdEquipe parameter. Authenticated attackers can send GET requests to egeq.php with crafted SQL payloads to extract sensitive database information, including version details.
- CVE-2018-25429High
Paroiciel 11.20 contains an SQL injection vulnerability in the zProIdPro parameter. Authenticated attackers can send GET requests to zpro.php with crafted SQL payloads to extract sensitive database information, including usernames, databases, and version details.
Original NVD description (English source)
Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the tRecIdListe parameter. Attackers can send GET requests to the trec.php endpoint with crafted SQL payloads to extract database information including table and column names.