PT-2025-44774 · Unknown · Water Management System

Published 2025-11-03 · Updated 2025-11-07 · CVE-2025-63447

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0

Description Water Management System version 1.0 is susceptible to Cross Site Scripting (XSS) attacks. The issue is located in the /add customer.php endpoint. The vulnerability allows attackers to inject malicious scripts into the web page viewed by other users. The vulnerable endpoint is /add customer.php.

Recommendations Apply appropriate input validation and output encoding to prevent the execution of malicious scripts in the /add customer.php endpoint.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-63447

Affected Products

Water Management System

References · 5

• 🔥 https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-8 · Exploit
• https://osv.dev/vulnerability/CVE-2025-63447 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63447 · Security Note
• https://t.me/cveNotify/142150 · Telegram Post
• https://t.me/CVEtracker/36428 · Telegram Post