CVE-2025-8744

CVE-2025-8744 affects CesiumLab Web prior to version 4.1. The vulnerability is an SQL injection in the /lodmodels/ code path caused by improper handling of the ID parameter, allowing a remote attacker to manipulate queries. Public exploits have been disclosed. The issue is confirmed across multip...

PT-2025-32418 · Unknown · Cesiumlab Web

Name of the Vulnerable Software and Affected Versions: CesiumLab Web versions prior to 4.1 Description: A critical vulnerability exists in CesiumLab Web. The issue affects unknown code within the /lodmodels/ file and allows for SQL injection through manipulation of the ID argument. This attack ca...