CVE-2018-25209 | OpenBiz Cubi Lite 3.0.8 /bin/controller.php Username sql injection (Exploit 45801 / EDB-45801)

March 26, 2026 Yanac

A vulnerability was found in OpenBiz Cubi Lite 3.0.8 and classified as critical. This issue affects some unknown processing of the file /bin/controller.php. Such manipulation of the argument Username leads to sql injection.

This vulnerability is listed as CVE-2018-25209. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More