PT-2025-39970 · Bip+2 · Bip+2

Mikołaj Matuszewski · Publicado 2025-09-30 · Atualizado 2025-09-30 · CVE-2025-8121

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The issue involves improper neutralization of input provided by an authorized user within the article positioning functionality, leading to potential Blind SQL Injection attacks. This affects all three templates: www, bip, and ww+bip. The product is End-Of-Life, and the producer will not release patches to address this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-8121

Produtos afetados

Bip

Ww+Bip

Www

Referências · 6

• https://twitter.com/VulmonFeeds/status/1973035885257011274 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-8121 · Nota de Segurança
• https://twitter.com/CveFindCom/status/1972967164899373393 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1972968857183879273 · Publicação no Twitter
• https://cert.pl/posts/2025/09/CVE-2025-7063 · Nota
• https://osv.dev/vulnerability/CVE-2025-8121 · Aviso do Fabricante