CVE-2025-0333

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/role/listData. The manipulation of the argument order leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
leiyuxi	cy-fast	1.0

References

https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli1.mdExploit
https://vuldb.com/?ctiid.290820Permissions Required, VDB Entry
https://vuldb.com/?id.290820Third Party Advisory, VDB Entry
https://vuldb.com/?submit.475297Third Party Advisory, VDB Entry
https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli1.mdExploit

Timeline

Published: Jan 9, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-03348.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of CVE-2025-03359.8A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2025-03369.8A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the CVE-2025-03376.5ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulne CVE-2025-03396.1A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the fil CVE-2025-03409.8A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an u CVE-2025-03419.8A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this i CVE-2025-03425.4A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unkn CVE-2025-03437.5Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itse CVE-2025-03448.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of CVE-2025-03458.8A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sy CVE-2025-03467.2A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part o