CVE-2018-25180
SQL Injection in Maitra 1.7.2 Enables Data Theft
Publication date: 2026-03-06
Last updated on: 2026-03-06
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| salzer_technologies | maitra | 1.7.2 |
| mongoose | mongoose | 5.6 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-89 | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': 'CVE-2018-25180 is a SQL injection vulnerability found in Maitra version 1.7.2. It allows authenticated attackers to inject malicious SQL code through the "mailid" parameter in the "outmail" and "inmail" modules. This injection enables attackers to execute arbitrary SQL queries on the backend database.'}, {'type': 'paragraph', 'content': 'Additionally, attackers can directly download the SQLite database file from the application directory, which contains sensitive mail tracking data and credentials. This vulnerability arises due to insufficient input validation and weak access controls.'}] [1, 2]
How can this vulnerability impact me? :
[{'type': 'paragraph', 'content': "This vulnerability can lead to unauthorized access to sensitive information stored in the Maitra application's SQLite database, including mail tracking data and credentials."}, {'type': 'paragraph', 'content': 'Attackers can execute arbitrary SQL queries, potentially extracting confidential data or manipulating the database. They can also download the entire database file directly, increasing the risk of data leakage.'}, {'type': 'paragraph', 'content': 'The impact includes high confidentiality loss, low integrity impact, and no direct availability impact, but it can facilitate further compromise of the system or data.'}] [1, 2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': 'This vulnerability can be detected by attempting to exploit the SQL injection in the "mailid" parameter of the outmail and inmail modules or by checking if the SQLite database file is accessible for download from the application directory.'}, {'type': 'list_item', 'content': 'Attempt to download the SQLite database file using a GET request to /application/db/maitra.sqlite and check if the database file is returned.'}, {'type': 'list_item', 'content': 'Test SQL injection by sending crafted GET requests to the outbound mail entry endpoint: /?c=outmail&m=outmailentry&mailid=[SQL], where [SQL] is a UNION SELECT payload to retrieve database information.'}, {'type': 'list_item', 'content': 'Similarly, test the inbound mail entry endpoint with: /?c=inmail&m=inmailentry&mailid=[SQL] using a UNION SELECT payload.'}, {'type': 'list_item', 'content': 'Monitor network traffic on ports 8080, 8081, and 8082 (default Mongoose web server ports) for suspicious requests targeting these endpoints.'}] [1]
What immediate steps should I take to mitigate this vulnerability?
[{'type': 'paragraph', 'content': 'Immediate mitigation steps include restricting access to the vulnerable application and its database files, applying input validation and sanitization on the "mailid" parameter, and preventing unauthorized direct access to the SQLite database file.'}, {'type': 'list_item', 'content': 'Restrict network access to the application ports (8080, 8081, 8082) to trusted users only.'}, {'type': 'list_item', 'content': 'Implement proper input validation and sanitization to prevent SQL injection attacks on the "mailid" parameter.'}, {'type': 'list_item', 'content': 'Remove or restrict direct access to the SQLite database file located at /application/db/maitra.sqlite.'}, {'type': 'list_item', 'content': 'Consider upgrading to a fixed version of the software if available or applying vendor-provided patches.'}] [1, 2]