Description
A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability.
Published: 2023-01-07
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2018-13831 A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability.
History

Mon, 22 Dec 2025 13:30:00 +0000

Type Values Removed Values Added
First Time appeared Roxlukas
Roxlukas lmeve
CPEs cpe:2.3:a:lmeve_project:lmeve:*:*:*:*:*:*:*:* cpe:2.3:a:roxlukas:lmeve:*:*:*:*:*:*:*:*
Vendors & Products Lmeve Project
Lmeve Project lmeve
Roxlukas
Roxlukas lmeve

cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2024-08-05T12:33:47.765Z

Reserved: 2023-01-07T11:27:50.644Z

Link: CVE-2018-25071

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-01-07T12:15:08.900

Modified: 2025-12-22T13:28:35.100

Link: CVE-2018-25071

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses