owl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus/save_order.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/LTLTLXEY/8f8ea23290f45fbc5cb2191a39cc74e8 | Third Party Advisory |
| https://github.com/slowlyo/owl-admin/issues/182 | Exploit Issue Tracking |
Configurations
History
09 Jul 2025, 02:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:owladmin:owl_admin:*:*:*:*:*:*:*:* | |
| References | () https://gist.github.com/LTLTLXEY/8f8ea23290f45fbc5cb2191a39cc74e8 - Third Party Advisory | |
| References | () https://github.com/slowlyo/owl-admin/issues/182 - Exploit, Issue Tracking | |
| First Time |
Owladmin
Owladmin owl Admin |
13 May 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 15:15
Updated : 2025-07-09 02:09
NVD link : CVE-2025-28057
Mitre link : CVE-2025-28057
JSON object : View
Products Affected
owladmin
- owl_admin
CWE
No CWE.