CVE-2025-4301: itsourcecode Content Management System search-notice.php sql injection
A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4301?
CVE-2025-4301 is categorized as a critical vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-4301?
To fix CVE-2025-4301, sanitize and validate all user inputs, particularly the 'searchdata' argument in the /search-notice.php file.
What type of vulnerability is CVE-2025-4301?
CVE-2025-4301 is an SQL injection vulnerability that affects the itsourcecode Content Management System.
Which versions of the itsourcecode Content Management System are affected by CVE-2025-4301?
CVE-2025-4301 affects version 1.0 of the itsourcecode Content Management System.
What could an attacker achieve by exploiting CVE-2025-4301?
Exploiting CVE-2025-4301 could allow an attacker to execute arbitrary SQL commands in the database, potentially leading to data breaches.