PT-2026-25787 · Chyrp+1 · Chyrp

Published 2026-03-16 · Updated 2026-03-17 · CVE-2025-69768

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chyrp versions prior to 2.5.3

Description A SQL injection issue exists in Chyrp versions prior to 2.5.3 through the Admin.php component. A remote attacker may be able to obtain sensitive information. The vulnerable component is Admin.php. The Admin.php component is susceptible to SQL injection attacks, potentially allowing unauthorized access to sensitive data.

Recommendations Update to version 2.5.3 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-69768

Affected Products

Chyrp

References · 6

• 🔥 https://swetha-subramanian6.github.io/web%20security/cve/chyrp-sqli-cve · Exploit
• https://osv.dev/vulnerability/CVE-2025-69768 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69768 · Security Note
• https://github.com/chyrp/chyrp/blob/768dd2f7/includes/controller/Admin.php#L1482 · Note
• https://github.com/chyrp/chyrp · Note
• https://twitter.com/CVEnew/status/2033755382405861538 · Twitter Post