PT-2025-38147 · Itsourcecode · Online Public Access Catalog Opac

Drewbyte · Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-10592

Mitre

CVSS v3.1

6.3

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of the component POST Parameter Handler. Such manipulation of the argument search field/search text leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-10592

Affected Products

Online Public Access Catalog Opac

References · 6

• 🔥 https://github.com/drew-byte/Online-Public-Access-Catalog-OPAC-SQLi-PoC/blob/main/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10592 · Security Note
• https://vuldb.com/?ctiid.324609 · Note
• https://vuldb.com/?submit.648959 · Note
• https://itsourcecode.com · Note
• https://vuldb.com/?id.324609 · Note