SQL Injection Vulnerability in kuaifan DooTask Affected by Remote Exploit
CVE-2025-10762
Key Information:
Badges
What is CVE-2025-10762?
A security flaw exists in kuaifan DooTask versions up to 1.2.49 within the file app/Http/Controllers/Api/UsersController.php. The vulnerability is related to improper handling of the argument keys[department], allowing for SQL injection attacks. This SQL injection can be exploited remotely, enabling attackers to manipulate database queries. Given that the exploit has been made public, it poses a risk to users of the affected version. Immediate action is recommended to secure systems against potential exploitation.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
DooTask 1.2.0
DooTask 1.2.1
DooTask 1.2.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved