SQL Injection Vulnerability in FeMiner WMS Product by FeMiner
CVE-2025-25992

5.1MEDIUM

Key Information:

Vendor

FeMiner

Status
FeMiner WMS
Vendor
CVE Published:
14 February 2025

What is CVE-2025-25992?

An SQL Injection vulnerability exists in FeMiner WMS version 1.0, specifically in the inquire_inout_item.php component. This flaw permits a remote attacker to exploit the system, potentially allowing them to extract sensitive information from the database through crafted SQL queries. As a result, unauthorized access to confidential data could occur, highlighting the need for prompt remediation and security best practices to safeguard against such attacks.

References

https://github.com/FeMiner/wms/issues/19

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.