CVE-2018-25175: Alienor Web Libre 2.0 SQL Injection via index.php

Severity: high (CVSS 8.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-03-06 · updated 2026-06-17
Weakness: CWE-89

Description

Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the identifiant parameter. Attackers can submit crafted POST requests to index.php with SQL injection payloads in the identifiant field to extract sensitive database information including usernames, databases, and version details.

Affected products

Alienor Web Libre: 2.0

References

https://www.exploit-db.com/exploits/45827
https://www.vulncheck.com/advisories/alienor-web-libre-sql-injection-via-indexphp

Get alerted when CVE-2018-25175 or the next vulnerability affects your stack