CVE-2025-8123

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
deerwms	deer-wms-2	3.0; 3.1; 3.2; 3.3

References

https://gitee.com/deerwms/deer-wms-2/issues/ICLRFLExploit, Issue Tracking, Vendor Advisory
https://vuldb.com/?ctiid.317508Permissions Required, VDB Entry
https://vuldb.com/?id.317508Third Party Advisory, VDB Entry
https://vuldb.com/?submit.619691Third Party Advisory, VDB Entry
https://gitee.com/deerwms/deer-wms-2/issues/ICLRFLExploit, Issue Tracking, Vendor Advisory

Timeline

Published: Jul 24, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-81248.8A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerability is an unknown fu CVE-2025-81259.8A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionali CVE-2025-81268.8A vulnerability classified as critical has been found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/user CVE-2025-81278.8A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. This vulnerability affects unknown code of the file /syste CVE-2025-81286.3A vulnerability, which was classified as critical, has been found in zhousg letao up to 7d8df0386a65228476290949e0413de48f7fbe98. This issue CVE-2025-81296.1A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/r CVE-2025-81318.8A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is an unknown function CVE-2025-81325.4A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function delfile CVE-2025-81336.3A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2. This affects the function getArticle of the file CVE-2025-81348.8A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code CVE-2025-81358.8A vulnerability, which was classified as critical, has been found in itsourcecode Insurance Management System 1.0. This issue affects some u CVE-2025-81367.5A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the