CVE-2018-25171
Published: 06 March 2026
Summary
CVE-2018-25171 is a high-severity Unrestricted Upload of File with Dangerous Type (CWE-434) vulnerability. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 19.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
EdTv 2 is affected by CVE-2018-25171, an SQL injection vulnerability in the 'id' parameter of the admin/edit_source endpoint. This flaw allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code, such as crafted SQL UNION statements, through GET requests. The vulnerability is associated with CWE-434 and carries a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), indicating high confidentiality impact with low complexity and no required privileges.
Unauthenticated remote attackers can exploit this vulnerability by sending specially crafted GET requests to the admin/edit_source endpoint. Successful exploitation enables extraction of sensitive database information, including schema names, user credentials, and version details, potentially leading to unauthorized data disclosure.
Advisories and references, including those from Exploit-DB (https://www.exploit-db.com/exploits/45849) and VulnCheck (https://www.vulncheck.com/advisories/edtv-sql-injection-via-id-parameter), provide further details on the vulnerability, such as proof-of-concept exploits. Practitioners should consult these sources for recommended mitigations, which may include input validation, parameterized queries, or upgrading affected EdTv 2 instances.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2018-21626
Vulnerability details
EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the admin/edit_source endpoint with crafted SQL UNION statements to extract…
more
database information including schema names, user credentials, and version details.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL injection in public web endpoint directly enables remote exploitation of a public-facing application for data access.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents SQL injection in the 'id' parameter by requiring validity checks on user inputs to block malicious SQL code execution.
Mandates identification, reporting, and correction of the specific SQL injection flaw in the admin/edit_source endpoint of EdTv 2.
Vulnerability scanning detects SQL injection vulnerabilities like CVE-2018-25171 in web endpoints for timely remediation.