CVE-2018-25362 — Twitter-Clone 1 SQL Injection via follow.php
Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Att…
Published: 2026-05-25 · CVSS: 8.8 · CVSS 4.0
Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information including usernames, passwords, and database credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7