PT-2025-31736 · Unknown · Wazifa System
Wllovemy
·
Published
2025-08-02
·
Updated
2025-08-02
·
CVE-2025-8467
Wllovemy
·
Published
2025-08-02
·
Updated
2025-08-02
·
CVE-2025-8467
7.5
High
Base vector | Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Wazifa System version 1.0
Description:
A critical issue exists in Wazifa System 1.0 related to SQL injection. The vulnerability is located in the `/controllers/regcontrol.php` file. The `Username` argument is susceptible to manipulation, leading to a remote SQL injection attack. The exploit for this issue has been publicly disclosed.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
SQL injection
Special Elements Injection