PT-2025-32378 · Unknown · Easy Hosting Control Panel

Published 2025-08-08 · Updated 2025-10-01 · CVE-2025-50928

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel EHCP version 20.04.1.b

Description The Easy Hosting Control Panel EHCP contains a SQL injection issue via the id parameter in the Change Settings function.

Recommendations As a temporary workaround, consider restricting access to the Change Settings function until a patch is available. Sanitize the id parameter before using it in SQL queries.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-50928

Affected Products

Easy Hosting Control Panel

References · 7

• 🔥 https://packetstorm.news/files/id/207907 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-50928 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50928 · Vendor Advisory
• https://t.me/CVEtracker/29524 · Telegram Post
• https://ehcp.net/?p=402 · Note
• https://t.me/cveNotify/137116 · Telegram Post
• https://twitter.com/CVEnew/status/1953872765746110962 · Twitter Post