TI-2018-15392 CVE-2018-25167 · GHSA-2jpw-jp56-mgr2Net-Billetterie 2.9 SQL Injection via login.inc.phpPriority HIGH 77Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0027 · Published 2026-03-06 · No fix listed CWE-89