Skip to content
OpenAdvisories
Medium · 5.8 Known exploited CVE-2025-25181 EUVD-2025-4072GHSA-6g37-4665-5v4w

A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL…

Published Feb 3, 2025 · Updated Feb 26, 2026 · Assigned by mitre

Description

A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.

Affected products

VendorProductAffectedFixed
Advantive VeraCore ≤ 2025.1.0 —

References