ГлавнаяУязвимости → CVE-2025-0486
7.3высокая

CVE-2025-0486

Описание

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fladmin/login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Затрагиваемое ПО
Fanli2012 Native-php-cms
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Источники
https://github.com/Fanli2012/native-php-cms/issues/8https://github.com/Fanli2012/native-php-cms/issues/8#issue-2769942639https://vuldb.com/?ctiid.291931https://vuldb.com/?id.291931https://vuldb.com/?submit.475249