Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by injecting SQL code into parameters. Attackers can exploit the key parameter in the login endpoint with union-based SQL injection to authenticate as administrator, then leverage authenticated file disclosure vulnerabilities in language_file.php to read arbitrary PHP files from the server.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2019-25675 eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by… https://www.cve.org/CVERecord?id=CVE-2019-25675
Post summary
The tweet briefly announces CVE‑2019‑25675, noting its SQL injection flaws that enable unauthenticated attackers to bypass admin authentication and view sensitive files.
[CVE-2019-25675: HIGH] Multiple SQL injection vulnerabilities in eDirectory allow attackers to bypass admin authentication & access sensitive files by injecting SQL code. Exploitable parameters found in logi...#cve,CVE-2019-25675,#cybersecurity https://cvefind.com/CVE-2019-25675
Post summary
The tweet discloses a high‑severity CVE involving multiple SQL injection flaws in eDirectory that enable attackers to bypass admin authentication and access sensitive files.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | arcasolutions | edirectory | - | - | - |