CNNVD-202509-1528 Information

CNNVD ID

CNNVD-202509-1528

CVE-2025-56407

  • CNNVD Published: 2025-09-10

Description (Chinese)

UTCMS是usualtool个人开发者的一个基于 UT 框架构建的内容管理系统。 UTCMS V9版本存在安全漏洞,该漏洞源于对文件app/modules/ut-data/admin/mysql.php中参数sql的错误操作导致SQL注入。

Description (English)

UTCMS is a UT-based content management system built by the UT framework of our own personal developers. The UTCMS V9 version contains a security loophole, which stems from the mishandling of sql, the parameter in documentapp/modules/ut-data/admin/mysql.php, resulting in the injection of SQL.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-09-10

Last Modified

2026-02-24

References

https://github.com/August829/CVEP/issues/4 https://github.com/August829/Yu/blob/main/20250810_1.md https://access.redhat.com/security/cve/cve-2025-56407

Share on: