CVE-2025-25604
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Feb 21, 2025
CWE ID 77
Summary
CVE-2020-19248 is a SQL Injection vulnerability affecting PbootCMS 1.4.1. This issue arises when the software fails to properly parse if statements in templates, enabling malicious users to inject malicious SQL code. By contaminating template content with page contamination URLs, attackers can trigger vulnerabilities when the program uses eval statements to parse templates, potentially leading to unauthorized data access or system compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- TOTOLINK X5000R
Affected Vendors
- TOTOLINK