CVE-2025-4352: Golden Link Secondary System tcEntrFlowSelect.htm sql injection
First published: Tue May 06 2025(Updated: )
A vulnerability, which was classified as critical, has been found in Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument custTradeId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Golden Link Secondary System | <=20250424 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.307469
- https://vuldb.com/?ctiid.307469
- https://vuldb.com/?submit.564592
- https://github.com/eeeeeekkkkkkkk/POC/blob/main/%E9%BB%84%E9%87%91%E9%80%9A%E4%BA%8C%E7%BA%A7%E7%B3%BB%E7%BB%9F%E4%B8%89%E4%BB%A3%E7%AE%A1%E7%90%86%E7%AB%AF%E7%B3%BB%E7%BB%9FtcEntrFlowSelect%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md
Frequently Asked Questions
What is the severity of CVE-2025-4352?
CVE-2025-4352 is classified as critical due to its potential for SQL injection attacks.
How do I fix CVE-2025-4352?
To fix CVE-2025-4352, update the Golden Link Secondary System to a version beyond 20250424.
What is the impact of CVE-2025-4352?
The impact of CVE-2025-4352 includes unauthorized access to database information through SQL injection.
Which versions are affected by CVE-2025-4352?
CVE-2025-4352 affects Golden Link Secondary System versions up to and including 20250424.
Where does CVE-2025-4352 occur?
CVE-2025-4352 occurs in the file /reprotframework/tcEntrFlowSelect.htm within the Golden Link Secondary System.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/epss
- agent/tags
- vendor/golden link
- canonical/golden link secondary system