CVE-2018-25433
Published: 01 June 2026
Summary
CVE-2018-25433 is a high-severity SQL Injection (CWE-89) vulnerability in Co (inferred from references). Its CVSS base score is 8.8 (High).
Operationally, ranked at the 26.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2018-21954
Vulnerability details
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in…
more
the com_jephotogallery component to execute arbitrary SQL queries and retrieve sensitive data like usernames and password hashes.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.