PT-2026-25787 · Chyrp+1 · Chyrp

Publicado 2026-03-16 · Atualizado 2026-03-17 · CVE-2025-69768

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chyrp versions prior to 2.5.3

Description A SQL injection issue exists in Chyrp versions prior to 2.5.3 through the Admin.php component. A remote attacker may be able to obtain sensitive information. The vulnerable component is Admin.php. The Admin.php component is susceptible to SQL injection attacks, potentially allowing unauthorized access to sensitive data.

Recommendations Update to version 2.5.3 or later.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-69768

Produtos afetados

Chyrp

Referências · 6

• 🔥 https://swetha-subramanian6.github.io/web%20security/cve/chyrp-sqli-cve · Exploit
• https://github.com/chyrp/chyrp/blob/768dd2f7/includes/controller/Admin.php#L1482 · Nota
• https://github.com/chyrp/chyrp · Nota
• https://osv.dev/vulnerability/CVE-2025-69768 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2033755382405861538 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-69768 · Nota de Segurança