CNNVD-202512-3996 Information

CNNVD ID

CNNVD-202512-3996

CVE-2025-15014

  • CNNVD Published: 2025-12-22

Description (Chinese)

loganSite是loganhong个人开发者的一个个人博客项目。 loganSite存在SQL注入漏洞,该漏洞源于组件Article Handler中文件/includes/article_detail.php中参数ID的错误操作,可能导致SQL注入攻击。

Description (English)

BloggerSite is a personal blog project for the individual developer of loganhong. LoganSite has an injection loophole in SQL, which stems from the wrong operation of parameter ID in file /includs/article detail.php in component Article Handler, which may lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

个人开发者

Published

2025-12-22

Last Modified

2026-02-24

References

https://vuldb.com/?submit.720037 https://vuldb.com/?ctiid.337720 https://vuldb.com/?id.337720 https://github.com/ssiled/cve/issues/1 https://access.redhat.com/security/cve/cve-2025-15014

Share on: