CVE-2025-52694-POC

CVE-2025-52694：Advantech SaaS Composer SQL注入 此仓库包含针对CVE-2025-52694 的概念验证（PoC）工具，该漏洞是一个影响Advantech IoTSuite 和 IoT Edge 产品 的严重未授权SQL注入漏洞。 漏洞概述 属性| 详情 ---|--- CVE ID| CVE-2025-52694 厂商| Advantech 产品| IoTSuite 和 IoT Edge 产品 严重性| 严重 漏洞类型| SQL注入（CWE-89） 受影响端点| /displays/filename.json?orgid= 受影响版本...

📄 Advantech IoTSuite / IoT Edge SQL Injection

A critical unauthenticated SQL injection vulnerability was identified in Advantech WISE-IoTSuite / SaaS Composer. The issue resides in the /displays/filename.json endpoint, where the filename parameter is improperly sanitized before being concatenated into a backend PostgreSQL query. An attacker...