CVE-2025-4863

creationtimestamp| type| source ---|---|--- 2025-05-18 07:06:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgimnmejab2 2025-05-18 09:13:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqr3erg2o...

CVE-2025-4863

Summary: CVE-2025-4863 affects Advaya Softech GEMS ERP Portal 2.1, targeting the /studentLogin/studentLogin.action endpoint. The vulnerability arises from manipulation of the userId parameter, enabling SQL injection and remote initiation. Public disclosures and PoC materials exist (e.g., GEMS_POC...