Report: CVE-2018-25338 - Zechat 1.5 SQL Injection via hashtag parameter - Guide

Report: CVE-2018-25338 - Zechat 1.5 SQL Injection via hashtag parameter - Guide

CVE ID :CVE-2018-25338 Published : May 17, 2026, 1:16 p.m. | 1 hour, 13 minutes ago Description :Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
May 17, 2026
Impact: SQL injection