CVE-2025-1356
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Feb 16, 2025
Updated: Feb 25, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-1356 is a critical vulnerability affecting the Needymamin Library Card System 1.0. This issue lies in the file card.php, where manipulation of the argument id results in SQL injection. The vulnerability allows remote attacks and the exploit has been made public. Despite early disclosures to the vendor, they have yet to respond or issue a patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share