CVE-2025-66260

creationtimestamp| type| source ---|---|--- 2025-11-26 03:28:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ivyrzvfn2s 2025-11-26 15:28:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115616705516119073...

CVE-2025-66260

The CVE-2025-66260 entry concerns the DB Electronica Mozart FM Transmitter product line (versions 30–7000). The root cause is SQL injection in status_sql.php: the endpoint constructs UPDATE statements by directly concatenating user-supplied sw1 and sw2 parameters instead of using parameterized qu...