Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-41678

SQL Injection via POST Requests Allowing Configuration Database Manipulation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MB connect line mbNET.mini

Default version status: unaffected

  • 0.0.0 to < 2.3.3affected

Helmholz REX 100

Default version status: unaffected

  • 0.0.0 to < 2.3.3affected

References