CVE-2025-0489

CVE-2025-0489 affects Fanli2012 native-php-cms 1.0. The vulnerability resides in /fladmin/friendlink_dodel.php where manipulation of the id parameter leads to SQL injection. The issue can be triggered remotely and public exploit information exists. Affected component: file handling friendlink_dod...

CVE-2025-0489: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file /fladmin/friendlinkdodel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...