CVE-2025-5386: JeeWMS cgformTransController.do transEditor sql injection
Published May 31, 2025
·Updated
A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Affected Software
2 affected components
Jeewms JeeWMS<=20250504
Huayi-tec Jeewms<=2025-05-04
Event History
May 31, 2025
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-5386?
CVE-2025-5386 has been rated as critical due to its potential for SQL injection.
2
How do I fix CVE-2025-5386?
To fix CVE-2025-5386, update JeeWMS to a version newer than 20250504.
3
What type of vulnerability is CVE-2025-5386?
CVE-2025-5386 is a SQL injection vulnerability affecting JeeWMS.
4
Which version of JeeWMS is affected by CVE-2025-5386?
JeeWMS versions up to and including 20250504 are affected by CVE-2025-5386.
5
How can CVE-2025-5386 be exploited?
CVE-2025-5386 can be exploited remotely via manipulation of the transEditor function.