CVE 5.3 MEDIUM

loganhong php loganSite Article article_detail.php sql injection_CVE-2025-15014

5.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X

Description

A security flaw has been discovered in loganhong php loganSite up to c035fb5c3edd0b2a5e32fd4051cbbc9e61a31426. This affects an unknown function of the file /includes/article_detail.php of the component Article Handler. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Basic Information

ID CVE-2025-15014
Source VulDB
Published Dec 22, 2025 at 05:02

Affected Product

Vendor loganhong
Product php loganSite
Version c035fb5c3edd0b2a5e32fd4051cbbc9e61a31426
Affected Versions loganhong php loganSite c035fb5c3edd0b2a5e32fd4051cbbc9e61a31426

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.