PT-2025-31736 · Unknown · Wazifa System

Wllovemy

·

Published

2025-08-02

·

Updated

2025-08-02

·

CVE-2025-8467

CVSS v2.0
7.5
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions:

Wazifa System version 1.0

Description:

A critical issue exists in Wazifa System 1.0 related to SQL injection. The vulnerability is located in the `/controllers/regcontrol.php` file. The `Username` argument is susceptible to manipulation, leading to a remote SQL injection attack. The exploit for this issue has been publicly disclosed.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Special Elements Injection

Weakness Enumeration

Related Identifiers

CVE-2025-8467

Affected Products

Wazifa System