Approved changes feed: RSS · Atom

cpe:2.3:a:sms:rmedia_sms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSms (a932491a-589e-5300-aef8-5ea3c96654c8)
ProductRmedia Sms (edca84ca-012e-568c-9179-5594836e72f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25173 vulnerable 2026-06-08 05:11:29.531428 Rmedia SMS 1.0 SQL Injection via editgrp.php
HIGH (8.2)
Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retrieve schema names and sensitive database data.
Published: 2026-03-06T12:19:04.131Z
Updated: 2026-03-09T15:26:56.734Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.