CVE-2025-23779
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Jan 16, 2025
CWE ID 89
Summary
CVE-2025-23779 is an SQL injection vulnerability affecting ResAds from an unknown version up to 2.0.5. The flaw arises due to improper handling of special elements in SQL commands within web-mv.de. An attacker can exploit this weakness to inject malicious SQL code, potentially gaining unauthorized access to sensitive data or even executing unintended commands on the targeted system. This issue poses a significant risk to organizations using the affected version of ResAds and requires immediate remediation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.