A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. Affected is an unknown function of the file /fladmin/cat_dodel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/Fanli2012/native-php-cms/issues/13 | Exploit Issue Tracking |
| https://github.com/Fanli2012/native-php-cms/issues/13#issue-2770022466 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.291936 | Permissions Required VDB Entry |
| https://vuldb.com/?id.291936 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.475260 | Third Party Advisory VDB Entry |
Configurations
History
27 Feb 2025, 02:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?id.291936 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/Fanli2012/native-php-cms/issues/13 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.291936 - Permissions Required, VDB Entry | |
| References | () https://github.com/Fanli2012/native-php-cms/issues/13#issue-2770022466 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?submit.475260 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:fanli2012:native-php-cms:1.0:*:*:*:*:*:*:* | |
| First Time |
Fanli2012 native-php-cms
Fanli2012 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE |
15 Jan 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-15 22:15
Updated : 2025-02-27 02:05
NVD link : CVE-2025-0491
Mitre link : CVE-2025-0491
JSON object : View
Products Affected
fanli2012
- native-php-cms
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')