This vulnerability (CVE-2025-32125) affects silvasoft Silvasoft boekhouden through version 3.0.6 and is caused by improper neutralization of special elements in SQL commands, enabling SQL Injection attacks. The CVSS 3.1 base score is 7.6, with network attack vector, low attack complexity, requiring high privileges but no user interaction, and impacts confidentiality highly, with no impact on integrity and low impact on availability. No patch or official vendor advisory is currently provided. The vulnerability is not known to be exploited in the wild and affects on-premises deployments only.

Successful exploitation could allow an attacker with high privileges to execute crafted SQL commands that may disclose sensitive information from the database, impacting confidentiality. The integrity of data is not directly affected, and availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege access to the affected application and monitor for suspicious database activity related to SQL commands. Avoid exposing the application to untrusted networks where possible.