A vulnerability was found in eNdonesia Portal 8.7 and classified as critical. Affected by this issue is some unknown functionality of the file mod.php. The manipulation results in sql injection.
This vulnerability is cataloged as CVE-2018-25405. The attack may be launched remotely. Furthermore, there is an exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2018-25405 | eNdonesia Portal 8.7 mod.php sql injection (Exploit 45654 / EUVD-2018-21927)
A vulnerability was found in eNdonesia Portal 8.7 and classified as critical. Affected by this issue is some unknown functionality of the file mod.php. The…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2018-25405
Exploitation: poc (PoC verfügbar)Automatable: yes (Automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-06-01T13:50:21.404164Z · CISA Coordinator
Advisory Radar
Workaround & Virtual-Patching empfohlen
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Öffentliche PoCs existieren. Isolieren Sie das System oder wenden Sie Micro-Segmentierungsregeln an, bis offizielle Patches vorliegen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.endonesia.org
-
Web Referencesourceforge.net
2 öffentliche Exploit-Referenz(en) detektiert (Exploit Database (EDB)).
PoC einsehen