CVE-2025-1464: Baiyi Cloud Asset Management System admin.house.collect.php sql injection
First published: Wed Feb 19 2025(Updated: )
A vulnerability, which was classified as critical, has been found in Baiyi Cloud Asset Management System up to 20250204. This issue affects some unknown processing of the file /wuser/admin.house.collect.php. The manipulation of the argument project_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Baiyi Cloud Asset Management System | <=20250204 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-1464?
The severity of CVE-2025-1464 is classified as critical, indicating a high level of risk.
How do I fix CVE-2025-1464?
To fix CVE-2025-1464, update the Baiyi Cloud Asset Management System to a version after 20250204.
What type of vulnerability is CVE-2025-1464?
CVE-2025-1464 is an SQL injection vulnerability affecting the Baiyi Cloud Asset Management System.
Which component is affected by CVE-2025-1464?
CVE-2025-1464 affects the file /wuser/admin.house.collect.php in the Baiyi Cloud Asset Management System.
What could happen if CVE-2025-1464 is exploited?
If CVE-2025-1464 is exploited, it could allow unauthorized access to the database and manipulation of data.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/source
- agent/tags
- agent/author
- agent/event
- vendor/baiyi
- canonical/baiyi cloud asset management system