CVE 6.5 MEDIUM

SQL Injection via POST Requests Allowing Configuration Database Manipulation_CVE-2025-41678

6.5 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Description

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.

Basic Information

ID CVE-2025-41678
Source CERTVDE
Published Jul 21, 2025 at 09:30
Modified Jul 21, 2025 at 12:32

Affected Product

Vendor MB connect line
Product mbNET.mini
Version 0.0.0
Affected Versions MB connect line mbNET.mini 0.0.0
Helmholz REX 100 0.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.