CVE-2025-10437: SQLi in Exagate's Webpack Management System
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eksagate Electronic Engineering and Computer Industry Trade Inc. Webpack Management System allows SQL Injection.
This issue affects Webpack Management System: through 20251119.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10437?
CVE-2025-10437 is a critical vulnerability involving SQL injection in the Eksagate Webpack Management System.
How do I fix CVE-2025-10437?
To fix CVE-2025-10437, update the Eksagate Webpack Management System to a version beyond 20251119.
What does CVE-2025-10437 allow an attacker to do?
CVE-2025-10437 allows an attacker to perform SQL injection attacks, potentially compromising the database.
Which versions of the Eksagate Webpack Management System are affected by CVE-2025-10437?
CVE-2025-10437 affects Eksagate Webpack Management System versions up to and including 20251119.
Is there a workaround for CVE-2025-10437 if I cannot update immediately?
A potential workaround for CVE-2025-10437 involves sanitizing user inputs to prevent SQL injection, but this is not a substitute for updating.