Description
A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2018-13831 | A vulnerability was found in roxlukas LMeve up to 0.1.58. It has been rated as critical. Affected by this issue is the function insert_log of the file wwwroot/ccpwgl/proxy.php. The manipulation of the argument fetch leads to sql injection. Upgrading to version 0.1.59-beta is able to address this issue. The patch is identified as c25ff7fe83a2cda1fcb365b182365adc3ffae332. It is recommended to upgrade the affected component. VDB-217610 is the identifier assigned to this vulnerability. |
References
History
Mon, 22 Dec 2025 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Roxlukas
Roxlukas lmeve |
|
| CPEs | cpe:2.3:a:roxlukas:lmeve:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Lmeve Project
Lmeve Project lmeve |
Roxlukas
Roxlukas lmeve |
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-05T12:33:47.765Z
Reserved: 2023-01-07T11:27:50.644Z
Link: CVE-2018-25071
No data.
Status : Modified
Published: 2023-01-07T12:15:08.900
Modified: 2025-12-22T13:28:35.100
Link: CVE-2018-25071
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD