CVE-2025-6919CWE-89sql-injection

CVE-2025-6919

Critical · published October 13, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

🔥 An SQL injection vulnerability in the Aykome License Tracking System allows attackers to hijack your database with just a clever command! Think of this like a restaurant where anyone can walk in and change the chef's special orders without anyone checking their ID. A crafty diner could substitute any dish on the menu, leaving your kitchen in chaos! An attacker could exploit this vulnerability to access sensitive data, modify records, or even delete crucial information in your database. The potential for data exposure and loss is absolutely devastating, especially if critical licensing information is compromised!

Put simply

Think of this like a restaurant where anyone can walk in and change the chef's special orders without anyone checking their ID. A crafty diner could substitute any dish on the menu, leaving your kitchen in chaos! This vulnerability stems from improper neutralization of special elements in SQL commands, enabling attackers to manipulate queries. By injecting SQL code, they can gain unauthorized access to the database, leading to severe consequences.

What to do

An attacker could exploit this vulnerability to access sensitive data, modify records, or even delete crucial information in your database. The potential for data exposure and loss is absolutely devastating, especially if critical licensing information is compromised! To protect your systems, upgrade the Aykome License Tracking System to the fixed version dated 06.10.2025 immediately. Additionally, implement input validation and use prepared statements to prevent further SQL injection risks. You’ve got this! With these actions, you can secure your system and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00374 · 30.2th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-10-13T17:15Z
References (2)
EPSS history
Timeline
  • 13 OCT 12:46Z
    SQLi in Cats Informatics' Aykome
    cvelistv5