Adianti vulnerabilities
Published CVEs affecting Adianti products: 1 record(s), with severity, exploitation and fixes.
CVE-2018-25257
High · 7.1
CWE-89 Apr 12, 2026
Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile
Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name field in SystemProfileForm. Attackers can submit crafted SQL statements in the profile edit endpoint to modify user credentials and gain administrative access.