CVE-2025-15142: SQL Injection in 9786 phpok3w
A vulnerability was identified in 9786 phpok3w up to 901d96a06809fb28b17f3a4362c59e70411c933c. Impacted is an unknown function of the file show.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2025-15142: SQL Injection in 9786 phpok3w
Description
A vulnerability was identified in 9786 phpok3w up to 901d96a06809fb28b17f3a4362c59e70411c933c. Impacted is an unknown function of the file show.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-12-27T10:20:50.984Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6951516dfd294cd93b04312b
Added to database: 12/28/2025, 3:49:01 PM
Last updated: 12/28/2025, 6:08:03 PM
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Related Threats
CVE-2025-15146: Cross Site Scripting in SohuTV CacheCloud
MediumCVE-2025-15145: Cross Site Scripting in SohuTV CacheCloud
MediumCVE-2025-15144: Cross Site Scripting in dayrui XunRuiCMS
MediumCVE-2025-15143: SQL Injection in EyouCMS
MediumCVE-2025-15141: Information Disclosure in Halo
LowActions
Need more coverage?
Upgrade to Pro Console in Console -> Billing for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.