PT-2025-44773 · Unknown · Water Management System

Publicado 2025-11-03 · Atualizado 2025-11-10 · CVE-2025-63446

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0

Description Water Management System version 1.0 is susceptible to Cross Site Scripting (XSS) attacks. The issue is located in the /add vendor.php endpoint. The vulnerability allows for the injection of malicious scripts through this endpoint.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling or restricting access to the /add vendor.php endpoint until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-63446

Produtos afetados

Water Management System

Referências · 5

• 🔥 https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-7 · Exploit
• https://t.me/cveNotify/142300 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-63446 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-63446 · Aviso do Fabricante
• https://t.me/CVEtracker/36427 · Publicação no Telegram