CVE-2025-14598
CRITICAL
2026-01-09
[email protected]
9.8
CVSS 3.1
Share
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
3
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
PoC Detected
Feb 10, 2026 - 20:29 vuln.today
Public exploit code
CVE Published
Jan 09, 2026 - 13:15 nvd
CRITICAL 9.8
Tags
Description
BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.
Analysis
BeeS Software BET Portal has SQL injection in the login functionality, allowing unauthenticated attackers to bypass authentication and extract database contents. PoC available.
Technical Context
The login form concatenates credentials directly into SQL queries (CWE-89). Login SQL injection is particularly dangerous as it provides both authentication bypass (login as any user) and data extraction.
Affected Products
BeeS Software Solutions BET Portal
Remediation
Implement parameterized queries. Never concatenate user input into SQL. Apply vendor patches.
Priority Score
69
Low
Medium
High
Critical
KEV: 0
EPSS: +0.0
CVSS: +49
POC: +20
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).