CVE-2018-25362
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
May 25, 2026
Vendor
unknown
Description
Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information including usernames, passwords, and database credentials.