PT-2025-23429 · Unknown · Chaitak-Gorai Blogbook
Bpy9Ft
·
Publicado
2025-06-01
·
Atualizado
2025-06-05
·
CVE-2025-5402
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513
Description
A critical issue was found in the GET Parameter Handler of the file /admin/includes/edit post.php. The manipulation of the
edit post id argument leads to SQL injection. This issue can be exploited remotely. The estimated number of potentially affected devices is not specified.Recommendations
As a temporary workaround, consider disabling the
edit post id argument in the /admin/includes/edit post.php file until a patch is available.
Restrict access to the /admin/includes/edit post.php file to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
SQL injection
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Chaitak-Gorai Blogbook