CVE-2018-25339: Bylancer Zechat

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data.

Affected products

• Bylancer Zechat: version 1.5 only

Published 2026-05-17. Last modified 2026-06-17.