CNNVD-202509-4301 Information
Sep 28, 2025
cve
CNNVD ID
CNNVD-202509-4301
Related CVE
- CNNVD Published: 2025-09-28
Description (Chinese)
CodeAstro Electricity Billing System是CodeAstro公司的一个电费计费系统。 CodeAstro Electricity Billing System 1.0版本存在SQL注入漏洞，该漏洞源于对文件/admin/bill.php中参数uid的错误操作，可能导致SQL注入攻击。
Description (English)
CodeAstro Electricity Billing Systems is a CodeAstro electric billing system. The CodeAstro Electricity Billing System Version 1.0 has an injection loophole in SQL, which stems from an error in the uid of the parameter in the document/admin/bill.php, which could lead to an SQL injection attack.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
CodeAstro
Published
2025-09-28
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.326185 https://vuldb.com/?submit.662441 https://codeastro.com/ https://vuldb.com/?id.326185 https://github.com/WANGshuyan2025/cve/issues/1 https://access.redhat.com/security/cve/cve-2025-11104
Share on: