High severity8.2NVD Advisory· Published Mar 6, 2026· Updated Apr 15, 2026

CVE-2018-25189

Description

Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive database information including usernames, database names, and version details.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Data Center Audit/Data Center Auditllm-create
Range: <=2.6.2

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/45807nvd
www.vulncheck.com/advisories/data-center-audit-sql-injection-via-username-parameternvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000