CVE-2025-4559 CRITICAL

CVE-2025-4559: Netvision ISOinsight - SQL Injection

Vendor Netvision
Product ISOinsight
Weakness CWE-89 · SQLi
Published May 12, 2025
Last update May 12, 2025
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The ISOinsight from Netvision has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Key dates

02Disclosure timeline

May 12, 2025 CVE published
May 12, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-5578 CodeAstro Online Classroom Parameter addassessment.php sql injection CVE-2022-36394 WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability CVE-2024-8709 SourceCodester Best House Rental Management System admin_class.php save_user sql injection CVE-2025-6160 SourceCodester Client Database Management System user_customer_create_order.php sql injection CVE-2024-1512 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection