Skip to content
OpenAdvisories
High · 7.2 Public exploit CVE-2025-58780 EUVD-2025-26996GHSA-cfrp-33c4-m9hw

index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier becau…

Published Sep 5, 2025 · Updated Sep 8, 2025 · Assigned by mitre

Vendor: ScienceLogic Product: SL1

Description

index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately describes the vulnerability."

Affected products

VendorProductAffectedFixed
ScienceLogic SL1 < 12.1.1 12.1.1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References