CVE-2018-25425 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
May 30, 2026
Last Seen
May 31, 2026

CVE-2018-25425 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.

CVE-2018-25425 is a vulnerability tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed May 30, 2026; most recent activity May 31, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2018-25425 AKAOMA CVE VULNERABILITIES / 8h Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid parameters. Attackers can send GET requests to index.php with crafted SQL payloads in the aid or cid parameters to extract database information including table and column names. — cve.akaoma.com · May 31, 2026
  • CVE-2018-25425 INCIBE-CERT - Vulnerabilities RSS / 4h Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score) — www.incibe.es · May 31, 2026
  • CVE-2018-25425 - Exploits & Severity — Feedly · May 30, 2026

Related Entities

Sql Injection Cwe-89 - SQL Injection T1190 - Exploit Public-Facing Application PHP Yot CMS

Frequently asked questions

What is CVE-2018-25425?

CVE-2018-25425 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 3 intelligence report mentions.

Is CVE-2018-25425 still active?

The most recent intelligence report mentioning CVE-2018-25425 on ThreatCluster is dated May 31, 2026. Activity was first observed May 30, 2026, giving a tracked span from then to May 31, 2026.

What is CVE-2018-25425 associated with?

Across ThreatCluster reporting, CVE-2018-25425 most frequently co-occurs with Sql Injection, Cwe-89 - SQL Injection, T1190 - Exploit Public-Facing Application, PHP, Yot CMS.

What are the latest developments involving CVE-2018-25425?

The most significant recent cluster is “SQL Injection Vulnerabilities Discovered in Gate Pass Management System and Yot CMS” (7 articles · Updated May 30, 2026). CVE-2018-25425 appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2018-25425?

CVE-2018-25425 appears in 3 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown