CVE-2025-2118

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 9, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-211807.8Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.CVE-2025-211817.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-211827.4Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityCVE-2025-211837.4Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityCVE-2025-211847.0Windows Core Messaging Elevation of Privileges VulnerabilityCVE-2025-211856.5Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2025-211867.8Microsoft Access Remote Code Execution VulnerabilityCVE-2025-211877.8Microsoft Power Automate Remote Code Execution VulnerabilityCVE-2025-211886.0Azure Network Watcher VM Extension Elevation of Privilege VulnerabilityCVE-2025-211894.3MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21192.0A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects CVE-2025-211908.8Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-2118: High severity, CVSS 7.3 | Vulnix