CVE-2025-15392

CVE-2025-15392 affects Kohana KodiCMS up to version 13.82.135, specifically the Search API Endpoint component file cms/modules/pages/classes/kodicms/model/page.php. The issue arises from manipulating the argument keyword in the Like function, enabling a SQL injection that can be exploited remotel...

CVE-2025-15392 Kohana KodiCMS Search API Endpoint page.php like sql injection

A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules/pages/classes/kodicms/model/page.php of the component Search API Endpoint. Executing manipulation of the argument keyword can lead to sql injection. It is possible to launch th...