CVE-2018-25204

CVE-2018-25204 is a critical SQL injection vulnerability affecting wecodex Library CMS 1.0, allowing unauthenticated attackers to bypass authentication. Rated 9.8 CRITICAL, it can be exploited remotely with low attack complexity by injecting boolean-based blind SQL payloads into the username parameter of the admin login endpoint. Successful exploitation grants unauthorized access and full control over the affected system, leading to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation or public exploit code, and it has received minimal community discussion.