songqb-xx/CVE-2025-57529

songqb-xx/CVE-2025-57529

Releases0
CPAS audit management information system has SQL injection vulnerability(CVE-2025-57529)

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL

YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access