CVE-2025-4795

CVE-2025-4795 affects gongfuxiang schoolcms 2.3.1. The vulnerability is in the SaveInfo function (/index.php?m=Admin&c=article&a=SaveInfo) where manipulating the ID parameter enables SQL injection. It can be exploited remotely, and public exploit details are present. Several connected sources cor...

CVE-2025-4795 gongfuxiang schoolcms index.php SaveInfo sql injection

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin&c=article&a=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...