PT-2025-23431 · Unknown · Chaitak-Gorai Blogbook

Bpy9Ft · Published 2025-06-01 · Updated 2025-06-02 · CVE-2025-5404

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513

Description A vulnerability was found in chaitak-gorai Blogbook, affecting unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the Search argument leads to denial of service. The exploit has been disclosed to the public and may be used. This product uses a rolling release to provide continuous delivery, and therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2025-5404

Affected Products

Chaitak-Gorai Blogbook

References · 10

• 🔥 https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20search.php%20search%20Parameter%20SQL%20Injection.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-5404 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5404 · Vendor Advisory
• https://twitter.com/transilienceai/status/1929335401015115827 · Twitter Post
• https://t.me/cvenotify/124274 · Telegram Post
• https://vuldb.com/?ctiid.310744 · Note
• https://vuldb.com/?id.310744 · Note
• https://vuldb.com/?submit.582915 · Note
• https://twitter.com/CVEnew/status/1929217025538183455 · Twitter Post
• https://t.me/cvetracker/25106 · Telegram Post