CVE-2025-10967

The CVE-2025-10967 entry relates to MuFen-mker PHP-Usermm (versions up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9). A SQL injection vulnerability exists in file /chkuser.php caused by manipulating the Username parameter. The attack can be remote and exploit is public. Public details about affect...

CVE-2025-10967 MuFen-mker PHP-Usermm chkuser.php sql injection

A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9. This affects an unknown part of the file /chkuser.php. Performing manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit is now public a...