PT-2025-41692 · Unknown · Ipynch Social Network Website

Lianhaorui · Published 2025-10-11 · Updated 2025-10-11 · CVE-2025-11606

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iPynch Social Network Website versions prior to b6933b6d7f82c84819abe458ccf0e59d61119541

Description A security flaw exists in the Search component of iPynch Social Network Website. Manipulation of an unknown function within this component can lead to SQL injection. This issue is potentially exploitable remotely, and an exploit has been publicly released. The product uses a rolling release strategy for continuous delivery.

Recommendations Update iPynch Social Network Website to a version later than b6933b6d7f82c84819abe458ccf0e59d61119541.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-11606

Affected Products

Ipynch Social Network Website

References · 9

• 🔥 https://github.com/Lianhaorui/Report/blob/main/sql.docx · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11606 · Security Note
• https://twitter.com/VulmonFeeds/status/1977103837157601484 · Twitter Post
• https://twitter.com/CVEnew/status/1977033450365264357 · Twitter Post
• https://vuldb.com/?id.327928 · Note
• https://vuldb.com/?submit.672465 · Note
• https://t.me/CVEtracker/34685 · Telegram Post
• https://vuldb.com/?ctiid.327928 · Note
• https://t.me/cveNotify/138353 · Telegram Post