SQL Injection Vulnerability in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform
CVE-2025-2030

6.9MEDIUM

Key Information:

Vendor: Seeyon
Status: Zhiyuan Interconnect Fe Collaborative Office Platform
Vendor: CVE Published:; 6 March 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-2030?

A security issue has been identified in the Seeyon Zhiyuan Interconnect FE Collaborative Office Platform, specifically affecting the functionality of the /security/addUser.jsp file. An SQL injection vulnerability can be exploited through manipulation of the groupId parameter, allowing attackers to execute arbitrary SQL queries remotely. Public disclosures have raised awareness of this vulnerability, and despite early notifications to the vendor, there has been no response. Users of the affected version should take immediate protective measures.

Affected Version(s)

Zhiyuan Interconnect FE Collaborative Office Platform 20250224

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-2030 - Proof of Concept