CVE-2025-9255 HIGH

CVE-2025-9255: Uniong｜WebITR - SQL Injection

Vendor Uniong

Product WebITR

Weakness CWE-89 · SQLi

Published August 22, 2025

Last update August 22, 2025

View on NVD All CVEs

CVSS base score

8.7/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

Key dates

02Disclosure timeline

August 22, 2025 CVE published

August 22, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-9255

Related vulnerabilities

04Related CVE

CVE-2025-9742 code-projects Human Resource Integrated System login.php sql injection CVE-2026-22484 WordPress Lisfinity Core plugin <= 1.5.0 - SQL Injection vulnerability CVE-2026-1159 itsourcecode Online Frozen Foods Ordering System order_online.php sql injection CVE-2024-33969 SQL injection in Janobe products CVE-2024-12999 PHPGurukul Small CRM edit-user.php sql injection