CVE-2025-25181

Advantive VeraCore (through 2025.1.0) contains a SQL injection in timeoutWarning.asp exploitable via the PmSess1 parameter, enabling remote arbitrary SQL execution. Evidence across sources indicates active exploitation of this vulnerability, with mitigations recommending disabling the PmSess1 par...