CVE-2025-58462 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could re…
Critical CVSS: 9.3

CVE-2025-58462

OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.
Vendor
Opexustech
Product
Foiaxpress Public Access Link
CWE
CWE-89
Yayın Tarihi
2025-09-09 21:15:38
Güncelleme
2025-09-26 13:39:18
Source Identifier
9119a7d8-5eab-497f-8521-727c672e3725
KEV Date Added
-

Kategoriler

CWE-89 Foiaxpress Public Access Link CRITICAL Opexustech 2025

Referanslar

https://docs.opexustech.com/docs/foiaxpress/11.13.0/FOIAXpress_Release_Notes_11.13.1.0.pdf https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2025/va-25-252-01.json https://www.cve.org/CVERecord?id=CVE-2025-58462