PT-2025-35939 · Unknown · Vx Guestbook 1.07

Published 2025-09-04 · Updated 2025-09-05 · CVE-2025-57263

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VX Guestbook version 1.07

Description An authenticated SQL injection vulnerability exists in VX Guestbook version 1.07. Attackers with admin access can inject malicious SQL payloads via the word POST parameter in the words.php admin panel.

Recommendations As a temporary workaround, restrict access to the word POST parameter in the words.php admin panel until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-57263

Affected Products

Vx Guestbook 1.07

References · 7

• 🔥 https://packetstorm.news/files/id/207781 · Exploit
• https://osv.dev/vulnerability/CVE-2025-57263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57263 · Security Note
• https://t.me/cveNotify/134271 · Telegram Post
• https://twitter.com/CVEnew/status/1963602771888013424 · Twitter Post
• https://twitter.com/dpharristech/status/1963965439786058162 · Twitter Post
• https://t.me/CVEtracker/31701 · Telegram Post