Filtered by vendor Sourceforge Subscriptions
Filtered by product Openbiz Cubi Lite Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-25209 1 Sourceforge 1 Openbiz Cubi Lite 2026-03-27 8.2 High
OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL code in the username field to extract sensitive database information or bypass authentication.