CVE-2025-5697

🗓️ 05 Jun 2025 21:31:06Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

Critical SQL injection vulnerability in Brilliance Golden Link affecting tcCustDeferPosiQuery.htm file.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-5697	6 Jun 202500:52	–	circl
CNNVD	Brilliance Golden Link Secondary System 注入漏洞	5 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-5697 Brilliance Golden Link Secondary System tcCustDeferPosiQuery.htm sql injection	5 Jun 202521:31	–	cvelist
EUVD	EUVD-2025-17033	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5697	5 Jun 202522:15	–	nvd
Positive Technologies	PT-2025-23982 · Unknown · Brilliance Golden Link Secondary System	5 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5697	7 Jun 202522:13	–	redhatcve
Vulnrichment	CVE-2025-5697 Brilliance Golden Link Secondary System tcCustDeferPosiQuery.htm sql injection	5 Jun 202521:31	–	vulnrichment

NVD

Vulners

Node

brilliance golden_link_secondary_systemRange≤2025-04-24

[
  {
    "vendor": "Brilliance",
    "product": "Golden Link Secondary System",
    "versions": [
      {
        "version": "20250424",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/%E9%BB%84%E9%87%91%E9%80%9Astorageworkrent-tcCustDeferPosiQuery.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
custTradeId	query param	reprotframework/tcCustDeferPosiQuery.htm	SQL injection via custTradeId parameter in /reprotframework/tcCustDeferPosiQuery.htm	CWE-74, CWE-89

06 Nov 2025 19:53Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.3 - 9.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.00209

SSVC