High severity8.2NVD Advisory· Published Mar 6, 2026· Updated Jun 17, 2026

CVE-2018-25167

Description

Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit malicious SQL code through the login POST parameter to extract database information including usernames, passwords, and system credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Net Billetterie/Net-Billetteriellm-create
Range: <2.9

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/45863nvd
www.vulncheck.com/advisories/net-billetterie-sql-injection-via-loginincphpnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000