EUVD-2025-14259

Malicious code in bioql PyPI...

CVE-2025-4541 LmxCMS POST Request ZtAction.class.php manageZt sql injection

A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4541

CVE-2025-4541 affects LmxCMS 1.41. The vulnerability is in the function manageZt of the file c/admin/ZtAction.class.php within the POST Request Handler. Manipulation of the sortid argument enables SQL injection, with remote exploitation possible and a public exploit present. Multiple sources conf...