CVE-2025-3800

creationtimestamp| type| source ---|---|--- 2025-04-19 12:02:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12582 2025-04-19 12:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln65qe6vql2r 2025-04-19 14:30:25+00:00| published-proof-of-concept|...

CVE-2025-3800 WCMS AnonymousController.php sql injection

A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/controllers/AnonymousController.php. The manipulation of the argument mobilephone leads to sql injection. The attack can be launched remotely. The explo...

CVE-2025-3800

CVE-2025-3800 affects WCMS 11, with a SQL injection vulnerability in an unknown functionality of file app/controllers/AnonymousController.php, triggered by manipulating the mobile_phone argument. Attack is remote; exploit has been disclosed publicly. Connected documents corroborate the issue and ...