PT-2025-41846 · Youdatasum · Cpas Audit Management System

Published 2025-10-13 · Updated 2026-02-04 · CVE-2025-57529

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions YouDataSum CPAS Audit Management System versions prior to 4.9

Description The YouDataSum CPAS Audit Management System is susceptible to SQL Injection due to inadequate input validation. This allows remote, unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter in the /cpasList/findArchiveReportByDah API endpoint. Successful exploitation could lead to unauthorized data access.

Recommendations Versions prior to 4.9 should be updated.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-57529

Affected Products

Cpas Audit Management System

References · 6

• 🔥 https://github.com/songqb-xx/CVE-2025-57529/blob/main/README.md · Exploit
• 🔥 https://github.com/songqb-xx/CPAS-bug · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57529 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57529 · Vendor Advisory
• https://twitter.com/HackingTeam777/status/1977840286165586320 · Twitter Post
• https://twitter.com/TheHackerWire/status/2019092780036006393 · Twitter Post