Is CVE-2018-25364 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2018-25364 being exploited in the wild.

How severe is CVE-2018-25364?

High severity, with a CVSS score of 8.2, published 25 May 2026.

Which products and versions are affected?

Fyffe Twitter-Clone 1.0 and earlier.

Is there a fix for CVE-2018-25364?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2018-25364 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2018-25364?

Check whether you run Fyffe Twitter-Clone at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2018-25364: Fyffe Twitter-Clone SQL injection in multiple components

CVE-2018-25364 · Severity: high · CVSS 8.2 · Published 2026-05-25

Twitter-Clone, a PHP-based social media application, contains a security flaw that allows unauthorized individuals to access its underlying database. By sending specially crafted web requests, an attacker can steal sensitive information such as user credentials, system data, and private account details. This could lead to a total compromise of user accounts and the exposure of all data stored within the application.

Technologies: Fyffe Twitter-Clone. Vendors: Fyffe.

Quick answers

Is CVE-2018-25364 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2018-25364 being exploited in the wild.
How severe is CVE-2018-25364?: High severity, with a CVSS score of 8.2, published 25 May 2026.
Which products and versions are affected?: Fyffe Twitter-Clone 1.0 and earlier.
Is there a fix for CVE-2018-25364?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2018-25364 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2018-25364?: Check whether you run Fyffe Twitter-Clone at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability exists in Twitter-Clone version 1.0 and earlier due to improper neutralization of user-supplied input in multiple components. Specifically, the 'name' parameter in search.php, the 'code' parameter in mailactivation.php, and the 'id' parameter in stalkers.php are passed directly into MySQL queries without sanitization. An unauthenticated remote attacker can exploit these endpoints using error-based or union-based SQL injection techniques. Successful exploitation allows for the extraction of arbitrary data from the database, including usernames, password hashes, and system configuration details. No patch is currently documented for this legacy repository.

Affected products

Fyffe (PHP-Twitter-Clone) Twitter-Clone 1.0 and earlier

Timeline

2018-08-23: disclosed: Exploit published on Exploit-DB
2026-05-25: advisory: NVD and VulnCheck advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.