CVE-2018-25096

A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 0.4-alpha is able to address this issue. The patch is named 58b413aa40820b49070782c786c526850ab7748f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249191.

• CWE-352

• https://github.com/MdAlAmin-aol/ownhealthrecord/commit/58b413aa40820b49070782c786c526850ab7748fPatch
• https://github.com/MdAlAmin-aol/ownhealthrecord/releases/tag/v0.4-alphaPatch
• https://vuldb.com/?ctiid.249191Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249191Third Party Advisory
• https://github.com/MdAlAmin-aol/ownhealthrecord/commit/58b413aa40820b49070782c786c526850ab7748fPatch
• https://github.com/MdAlAmin-aol/ownhealthrecord/releases/tag/v0.4-alphaPatch
• https://vuldb.com/?ctiid.249191Permissions Required, Third Party Advisory
• https://vuldb.com/?id.249191Third Party Advisory

Published

Dec 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-25090An unauthenticated remote attacker can use an XSS attack due…5.4
• CVE-2018-25091urllib3 before 1.24.2 does not remove the authorization HTTP…6.1
• CVE-2018-25092A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to…9.8
• CVE-2018-25093A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to…9.8
• CVE-2018-25094A vulnerability was found in ระบบบัญชีออนไลน์ Online Account…7.5
• CVE-2018-25095The Duplicator WordPress plugin before 1.3.0 does not proper…9.8
• CVE-2018-25097A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2018-25098** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…7.5
• CVE-2018-25099In the CryptX module before 0.062 for Perl, gcm_decrypt_veri…9.8
• CVE-2018-25100The Mojolicious module before 7.66 for Perl may leak cookies…5.3
• CVE-2018-25101A vulnerability, which was classified as problematic, has be…3.5
• CVE-2018-25103There exists use-after-free vulnerabilities in lighttpd <= 1…5.3