High severity8.2NVD Advisory· Published Mar 26, 2026· Updated Jun 17, 2026
CVE-2018-25209
CVE-2018-25209
Description
OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract sensitive database information or bypass authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: =3.0.8
- Sourceforge/OpenBiz Cubi Litev5Range: v3.0.8
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.