We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2025-67650

CVE-2025-67650

PHP

Severity: —
CVSS: —CVSS
Published: 2026-07-31
Last modified: 2026-07-31
CWE: CWE-89

Description

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the versions specified in the affected products list.

References

https://cert.pl/en/posts/2026/07/CVE-2025-67649/
https://www.phpjabbers.com/

Summary

Description

References