PT-2025-10598 · Unknown · Information Kerala Mission Sanchaya

Edwin Shajan · Published 2025-03-10 · Updated 2025-06-23 · CVE-2025-25382

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Information Kerala Mission SANCHAYA version 3.0.4

Description The issue in the Property Tax Payment Portal of Information Kerala Mission SANCHAYA allows attackers to arbitrarily modify payment amounts via a crafted request.

Recommendations For version 3.0.4, consider restricting access to the payment modification functionality until a patch is available. As a temporary workaround, monitor payment transactions closely to detect and prevent any unauthorized modifications.

Exploit

Fix

Weakness Enumeration

CWE-472

Related Identifiers

CVE-2025-25382

Affected Products

Information Kerala Mission Sanchaya

References · 8

• 🔥 https://github.com/edwin-0990/CVE_ID/blob/main/CVE-2025-25382/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-25382 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25382 · Security Note
• https://tax.lsgkerala.gov.in/epayment/QuickPaySearch.php · Note
• https://t.me/cvenotify/126422 · Telegram Post
• https://t.me/cvedetector/19963 · Telegram Post
• https://twitter.com/CVEnew/status/1899125742996492754 · Twitter Post
• https://t.me/cvetracker/18819 · Telegram Post