CVE-2025-25991

SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component...

CVE-2025-25991

creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pe4rz562s 2025-02-14 18:45:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5udaaixg2m 2025-02-14 19:18:23+00:00|...

CVE-2025-25991

A SQL Injection vulnerability exists in hooskcms v.1.7.1 , a lightweight content management system. The flaw originates from the improper neutralization of special elements used in an SQL command within the /install/index.php component. This allows a remote attacker to obtain sensitive informatio...