CVE-2025-58462 OPEXUS FOIAXpress PAL SQL injection

OPEXUS FOIAXpress Public Access Link PAL before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database...

OPEXUS FOIAXpress Public Access Link (PAL) SQL injection

RISK EVALUATION Successful exploitation could allow a remote, unauthenticated attacker to read, write, or delete any content in the underlying database. 2. RECOMMENDED PRACTICES Upgrade to FOIAXpress PAL version 11.13.1.0. 3. DESCRIPTION OPEXUS FOIAXpress Public Access Link PAL before version...

PT-2025-36976

Name of the Vulnerable Software and Affected Versions: OPEXUS FOIAXpress Public Access Link PAL versions prior to 11.13.1.0 Description: A SQL injection flaw exists in OPEXUS FOIAXpress Public Access Link PAL via the SearchPopularDocs.aspx page. A remote, unauthenticated attacker could potentiall...