CVE-2025-56407

A critical SQL injection vulnerability exists in HuangDou UTCMS V9 . The flaw originates from improper manipulation of the sql argument within the RunSql function, located in the file app/modules/ut-data/admin/mysql.php. This vulnerability can be exploited remotely to perform unauthorized databas...