TI-2018-15604 CVE-2018-25379 · GHSA-vvfm-5wmw-9mppCollectric CMU 1.0 SQL Injection via lang ParameterPriority HIGH 77Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database queries during authentication.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0039 · Published 2026-05-25 · No fix listed CWE-89