CVE Intelligence

Sourceforge OpenBiz Cubi Lite vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sourceforge OpenBiz Cubi Lite: 1 record(s), with affected versions and fixes.

CVE-2018-25209 High · 8.2 CWE-89 Mar 26, 2026
OpenBiz Cubi Lite 3.0.8 SQL Injection via username Parameter
OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract sensitive database information or bypass authentication.