SQL Injection Vulnerability in E-Registrasi Pencak Silat by SourceForge
CVE-2018-25385

8.8HIGH

Key Information:

Vendor: Eregistrasi-kejuaraan-silat
Status: Registrasi Pencak Silat
Vendor: CVE Published:; 29 May 2026

🔔 Create Eregistrasi-kejuaraan-silat Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-25385?

E-Registrasi Pencak Silat version 18.10 is susceptible to an SQL injection vulnerability, allowing unauthorized attackers to execute arbitrary SQL commands. By manipulating the 'id_partai' parameter within GET requests sent to 'monitor_nilai.php', attackers can leverage malicious SQL payloads to extract sensitive information from the database, including admin credentials and user data. This vulnerability significantly jeopardizes the integrity and confidentiality of user data, necessitating immediate attention from users and administrators.

Affected Version(s)

Registrasi Pencak Silat 18.10

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2018-25385 - Proof of Concept