Description
An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel.
Published: 2025-09-04
Score: 7.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-26724 An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel.
References
Link Providers
https://packetstorm.news/files/id/207781/ cve-icon cve-icon
History

Thu, 18 Sep 2025 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Phpversion
Phpversion vx Guestbook
CPEs cpe:2.3:a:phpversion:vx_guestbook:1.07:*:*:*:*:*:*:*
Vendors & Products Phpversion
Phpversion vx Guestbook

Thu, 04 Sep 2025 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-89
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 04 Sep 2025 13:45:00 +0000

Type Values Removed Values Added
Description An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel.
References

Subscriptions

Phpversion Vx Guestbook
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-09-04T15:04:26.190Z

Reserved: 2025-08-17T00:00:00.000Z

Link: CVE-2025-57263

cve-icon Vulnrichment

Updated: 2025-09-04T15:04:20.002Z

cve-icon NVD

Status : Analyzed

Published: 2025-09-04T14:15:46.130

Modified: 2025-09-18T16:51:13.593

Link: CVE-2025-57263

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses