Skip to content
OpenAdvisories

Vendor

rathena

8 known vulnerabilities.

Products

rathena 4 FluxCP 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-58448

    rAthena has SQL Injection in PartyBooking component via `WorldName` parameter.

    rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via `WorldName` parameter. Commit 0d89ae0 fixes the issue.

    rathena rathena
  • Critical 9.8
    CVE-2025-58447

    rAthena has heap-based buffer overflow in login server

    rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a …

    rathena rathena