CVE-2018-6367: Vastal I-Tech Buddy Zone Facebook Clone

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_events.php category parameter.

Affected products

• Vastal I-Tech Buddy Zone Facebook Clone: version 2.9.9 only

Published 2018-01-29. Last modified 2026-06-17.