CVE-2025-13770: Uniong｜WebITR - SQL Injection
WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Uniong WebITRto a version that resolves this vulnerability.Fixed in 2_1_0_34
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13770?
CVE-2025-13770 is considered a high severity vulnerability due to the risk of SQL Injection that can be exploited by authenticated attackers.
How do I fix CVE-2025-13770?
To fix CVE-2025-13770, update the Uniong WebITR software to the latest version that addresses this SQL Injection vulnerability.
What types of attacks can exploit CVE-2025-13770?
CVE-2025-13770 can be exploited through SQL Injection attacks that allow attackers to execute arbitrary SQL commands against the database.
Who is affected by CVE-2025-13770?
CVE-2025-13770 affects users of Uniong WebITR who have authentication capabilities.
What are the potential impacts of CVE-2025-13770?
The potential impacts of CVE-2025-13770 include unauthorized access to sensitive database information and potential data breaches.