CVE-2025-25991

SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php component...

CVE-2025-25991

creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pe4rz562s 2025-02-14 18:45:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5udaaixg2m 2025-02-14 19:18:23+00:00|...

CVE-2025-25991

The content management system hooskcms v.1.7.1 is susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can exploit the /install/index.php component to obtain sensitive information . While the vulnerability is confirmed, there is currently no information regarding a newer vers...