VYPR

jVideo Kit

by ASP.NET

CVEs (1)

  • CVE-2018-25205HigMar 26, 2026
    risk 0.53cvss 8.2epss 0.00

    ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search functionality. Attackers can submit malicious SQL payloads via GET or POST requests to the /search endpoint to…