Skip to content
OpenAdvisories
High · 7.3 CVE-2025-13121 EUVD-2025-175332GHSA-5cxc-jwxr-pc7p

cameasy Liketea API Endpoint StoreController.php list sql injection

Published Nov 13, 2025 · Updated Nov 13, 2025 · Assigned by VulDB

Description

A security vulnerability has been detected in cameasy Liketea 1.0.0. Impacted is the function list of the file laravel/app/Http/Controllers/Front/StoreController.php of the component API Endpoint. Such manipulation of the argument lng/lat leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected products

VendorProductAffectedFixed
cameasy Liketea 1.0.0 —

References