We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2025-15263

CVE-2025-15263

PHP

Severity: HIGH
CVSS: 7.3CVSS
Published: 2025-12-30
Last modified: 2026-02-24
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE: CWE-74CWE-89

Description

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

References

https://gitee.com/devilrunsun/mywork/issues/IDGMME
https://vuldb.com/?ctiid.338657
https://vuldb.com/?id.338657
https://vuldb.com/?submit.725820

Summary

Description

References