Sourceforge Openbiz Cubi Lite vulnerabilities

1 vulnerability

Known vulnerabilities in Sourceforge Openbiz Cubi Lite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-25209sourceforgeopenbiz cubi lite
EPSS score
0.33%
OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract sensitive database information or bypass authentication.