CVE-2025-12342

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

DFIR Lab@DFIR_Lab21h
🚨 HIGH: CVE-2025-12342 (CVSS 7.3) - SQL injection in Ghost Hot Spot ≤20251014 /Auth[.]php. Remote exploit published. Vendor unresponsive. Patch/mitigate immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/F3KdJ1lQoD
0000136
150 followersView on X

Explore more

Back to dashboard