CVE-2025-2117

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as critical. Affected by this issue is the function electricDocList of the file /newsedit/report/reportCenter.do. The manipulation of the argument fvID/catID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
Beijing Founder Electronics	Founder Enjoys All-Media Acquisition and Editing System	3.0

References

Timeline

Published: Mar 9, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-211705.5Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an applicati CVE-2025-211717.5.NET Remote Code Execution Vulnerability CVE-2025-211727.5.NET and Visual Studio Remote Code Execution Vulnerability CVE-2025-211737.3.NET Elevation of Privilege Vulnerability CVE-2025-211747.5Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over CVE-2025-211768.8.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-211778.8Server-side request forgery (ssrf) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network.CVE-2025-211788.8Visual Studio Remote Code Execution Vulnerability CVE-2025-211794.8DHCP Client Service Denial of Service Vulnerability CVE-2025-21187.3A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /ad CVE-2025-211807.8Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.CVE-2025-211817.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability