PT-2026-23692 · Maitra · Maitra

Published 2026-03-06 · Updated 2026-03-06 · CVE-2018-25180

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Maitra version 1.7.2

Description The software contains a SQL injection flaw that permits authenticated attackers to run arbitrary SQL queries by submitting malicious code via the mailid parameter within the outmail and inmail modules. Attackers can also directly download the SQLite database file from the application directory, potentially exposing sensitive mail tracking data and credentials.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-25180

Affected Products

Maitra

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25180 · Security Note
• https://t.me/CVEtracker/46597 · Telegram Post
• https://exploit-db.com/exploits/45841 · Note
• https://vulncheck.com/advisories/maitra-sql-injection-and-database-file-download · Note