CVE-2025-0489

creationtimestamp| type| source ---|---|--- 2025-01-15 21:36:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113834522556296724 2025-01-15 22:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfss4iodt32j 2025-01-15 23:08:25+00:00| seen|...

CVE-2025-0489

CVE-2025-0489 affects Fanli2012 native-php-cms 1.0. The vulnerability resides in /fladmin/friendlink_dodel.php where manipulation of the id parameter leads to SQL injection. The issue can be triggered remotely and public exploit information exists. Affected component: file handling friendlink_dod...

CVE-2025-0489 Fanli2012 native-php-cms friendlink_dodel.php sql injection

A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file /fladmin/friendlinkdodel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...