PT-2025-46995 · Unknown · Svx Portal

Published 2025-11-14 · Updated 2025-11-14 · CVE-2025-63724

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions SVX Portal version 2.7A

Description A SQL injection flaw exists in SVX Portal version 2.7A. This issue is triggered by a specially crafted POST request sent to the /admin/update setings.php endpoint. Successful exploitation could allow an attacker to manipulate database queries. The vulnerable parameter is not explicitly specified.

Recommendations Apply updates to address the issue in SVX Portal version 2.7A. As a temporary workaround, restrict access to the /admin/update setings.php endpoint.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-63724

Affected Products

Svx Portal

References · 6

• 🔥 https://deepstrike.io/blog/sql-injection-in-svx-portal-v-2-7A · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63724 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63724 · Vendor Advisory
• https://twitter.com/CVEnew/status/1989441998449954934 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1989409654359679072 · Twitter Post
• https://t.me/CVEtracker/37353 · Telegram Post