Approved changes feed: RSS · Atom

cpe:2.3:a:edtv:edtv:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEdtv (fa945d4b-d251-590c-a039-9cd4e4571781)
ProductEdtv (534312f5-51ee-5ee3-8fea-735ad54980d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25171 vulnerable 2026-06-08 05:11:29.529415 EdTv 2 SQL Injection via id Parameter
HIGH (8.2)
EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the admin/edit_source endpoint with crafted SQL UNION statements to extract database information including schema names, user credentials, and version details.
Published: 2026-03-06T12:19:02.479Z
Updated: 2026-03-09T19:06:04.279Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.