CVE-2025-4795

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin=article=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-4795

CVE-2025-4795 affects gongfuxiang schoolcms 2.3.1. The vulnerability is in the SaveInfo function (/index.php?m=Admin&c=article&a=SaveInfo) where manipulating the ID parameter enables SQL injection. It can be exploited remotely, and public exploit details are present. Several connected sources cor...

CVE-2025-4795 gongfuxiang schoolcms index.php SaveInfo sql injection

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin&c=article&a=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-4795 gongfuxiang schoolcms index.php SaveInfo sql injection

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin&c=article&a=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-4795: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin&c=article&a=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

PT-2025-21750 · Unknown · Gongfuxiang Schoolcms

Name of the Vulnerable Software and Affected Versions: gongfuxiang schoolcms version 2.3.1 Description: A critical issue has been discovered, affecting the SaveInfo function of the file "/index.php?m=Admin&c=article&a=SaveInfo". The manipulation of the ID argument leads to SQL injection. This iss...