CVE-2025-4300: falha de média gravidade em itsourcecode Content Management System
itsourcecode Content Management System search_list.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. Affected is an unknown function of the file /search_list.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
itsourcecode · Content Management SystemCVEs relacionadas — itsourcecode Content Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-4311MEDIUMitsourcecode Content Management System update_main_topic_img.php sql injectionEPSS 0.6%CVE-2025-4301MEDIUMitsourcecode Content Management System search-notice.php sql injectionEPSS 0.6%CVE-2025-4310MEDIUMitsourcecode Content Management System add_topic.php unrestricted uploadEPSS 0.4%CVE-2026-10242MEDIUMitsourcecode Content Management System instructions.php sql injectionEPSS 0.3%CVE-2026-10265MEDIUMitsourcecode Content Management System edit_topic.php sql injectionEPSS 0.2%CVE-2026-10258MEDIUMitsourcecode Content Management System add_sub_topic.php sql injectionEPSS 0.2%