CVE-2025-25181

Advantive VeraCore SQL Injection Vulnerability

Veracore

A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.

3. Feb 2025

Ausgewertete Quellen

• Hinweis
  https://intezer.com/blog/research/xe-group-exploiting-zero-days/
• Hinweis
  https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25181
• CISA
  Advantive VeraCore SQL Injection Vulnerability
• NVD
  CVE-2025-25181