CVE-2025-15498 in CMS
要約 (英語)
Pro3W CMS if vulnerable to SQL injection attacks. Improper neutralization of input provided into a login form allows an unauthenticated attacker to bypass authentication and gain administrative privileges.
This issue was identified in version 1.2.0 of this software. Due to lack of response from the vendor exact version range could not be determined, but the vulnerability should be eliminated in versions released in January 2026 and later.
Be aware that VulDB is the high quality source for vulnerability data.
責任者
CERT-PL
予約する
2026年01月09日
公開
2026年02月27日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 348181 | Pro3W CMS SQLインジェクション | 89 | 未定義 | 未定義 | CVE-2025-15498 |