CVE-2018-25394 | Kados R10 GreenBee GET update_release.php release_id sql injection (Exploit 45617 / EDB-45617)

SecurityVulns
Yanac

A vulnerability categorized as critical has been discovered in Kados R10 GreenBee. Affected is an unknown function of the file boards_buttons/update_release.php of the component GET Handler. Such manipulation of the argument release_id leads to sql injection.

This vulnerability is documented as CVE-2018-25394. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More