CVE-2025-10122: Maccms10 Database.php rep sql injection

Published Sep 9, 2025

Updated

A vulnerability was found in Maccms10 2025.1000.4050. Affected is the function rep of the file application/admin/controller/Database.php. Performing manipulation of the argument where results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

maccms maccms10

maccms Maccms=10.0-2025.1000.4050

Event History

Sep 9, 2025

CVE Published

via MITRE·02:32 AM

Data Sourced

via MITRE·02:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10122?

CVE-2025-10122 has been classified as a critical severity vulnerability due to the potential for remote SQL injection.

How do I fix CVE-2025-10122?

To fix CVE-2025-10122, update Maccms10 to the latest version where the vulnerability has been patched.

What type of vulnerability is CVE-2025-10122?

CVE-2025-10122 is a SQL injection vulnerability that allows attackers to manipulate database query arguments.

Can CVE-2025-10122 be exploited remotely?

Yes, CVE-2025-10122 can be exploited remotely, allowing unauthorized access to the database.

Which software versions are affected by CVE-2025-10122?

CVE-2025-10122 affects Maccms10 version 2025.1000.4050.