CVE-2025-66944Disclosure(databasir / databasir)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint

databasir CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

databasir

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

databasir

Products

databasir

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud218d
Disclosure
🚨*CVE* CVE-2025-66944 SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API end… https://www.cve.org/CVERecord?id=CVE-2025-66944 ----- Traducción: CVE-2025-66944: vu… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2025‑66944 as a SQL injection that enables remote code execution through the search API query parameter, but does not provide a PoC, exploit, patch, or evidence of active exploitation.
0000099
56 followersView on X
CVE@CVEnew218d
Disclosure
CVE-2025-66944 SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API end… https://www.cve.org/CVERecord?id=CVE-2025-66944
Post summary
The text announces CVE-2025-66944, a SQL injection in vran-dev databaseir v.1.0.7 that could lead to remote code execution via the search API parameter.
00000368
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	databasir	databasir	-	-	-

Explore more

Back to dashboard databasir CVEs databasir vulnerabilities