CVE-2025-13168

CriticalCVSS 9.8/10Last modified Oct 19, 2026

Description

A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overrided_past_order_list of the file ury/ury/api/pos_extend.py. This manipulation of the argument search_term causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Upgrading to version 0.2.1 is able to mitigate this issue. Patch name: 063384e0dddfd191847cd2d6524c342cc380b058. It is suggested to upgrade the affected component. The vendor replied and reacted very professional.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
ury-erp	ury	0.1; 0.2.0

References

https://github.com/ictrun/ury-vulns/blob/main/README.mdExploit, Third Party Advisory
https://github.com/ictrun/ury-vulns/blob/main/README.md#verification-stepsExploit, Third Party Advisory
https://github.com/ury-erp/ury/commit/063384e0dddfd191847cd2d6524c342cc380b058Patch
https://github.com/ury-erp/ury/releases/tag/v0.2.1Release Notes
https://vuldb.com/?ctiid.332456Permissions Required, VDB Entry
https://vuldb.com/?id.332456Third Party Advisory, VDB Entry
https://vuldb.com/?submit.683984Third Party Advisory, VDB Entry
https://github.com/ictrun/ury-vulns/blob/main/README.mdExploit, Third Party Advisory
https://github.com/ictrun/ury-vulns/blob/main/README.md#verification-stepsExploit, Third Party Advisory

Timeline

Published: Nov 14, 2025
Last modified: Oct 19, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-131699.8A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown c CVE-2025-131709.8A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the CVE-2025-131718.8A vulnerability was identified in ZZCMS 2023. This impacts an unknown function of the file /admin/wangkan_list.php. Such manipulation of the CVE-2025-131728.8A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-r CVE-2025-131736.5Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initia CVE-2025-131746.3A weakness has been identified in rachelos WeRSS we-mp-rss up to 1.4.7. Affected by this vulnerability is the function do_job of the file /r CVE-2025-131755.1Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using CVE-2025-131768.4Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL.CVE-2025-131778.8A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728. This affects an unknown part. The manipulation results in cross-s CVE-2025-131785.4A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file /edit_profile of the CVE-2025-131796.5A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. This issue a CVE-2025-131805.4A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Impacted is an un