CVE-2025-56407

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical

High · published September 10, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/mysql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.3th percentile
Published
2025-09-10T00:00Z
EPSS history
Timeline
  • 10 SEP 00:00Z
    A vulnerability has been found in HuangDou UTCMS V9 and classified as critical
    cvelistv5