CVE-2025-0488
CVSS 2.0 Score 6.5 of 10 (medium)
Details
Published Jan 15, 2025
Updated: Jan 16, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-0488 is a newly disclosed critical vulnerability that affects Fanli2012 native-php-cms version 1.0. The issue lies within the product_list.php file, and it can be exploited through the manipulation of the cat argument. This leads to SQL injection, allowing attackers to execute malicious queries remotely. Public disclosure of the exploit increases the risk of this vulnerability being exploited in real-world attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.