CVE-2025-25221 - CERT CVE
ID CVE-2025-25221
Sažetak The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
Reference
CVSS
Base: 7.3
Impact: 3.4
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
LOW LOW LOW
CVSS vektor CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Zadnje važnije ažuriranje 18-02-2025 - 01:15
Objavljeno 18-02-2025 - 01:15