EUVD-2025-17582Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injections.
Analysis
CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injections.
Technical ContextAI
SQL injection occurs when user-supplied input is incorporated into SQL queries without proper sanitization or parameterized queries.
RemediationAI
Use parameterized queries or prepared statements. Apply input validation and escape special characters. Implement least-privilege database accounts.
CyberData 011209 Intercom devices contain an authentication bypass vulnerability in the web interface accessible via an
Critical arbitrary file upload vulnerability in CyberData 011209 Intercom systems that allows authenticated attackers to
CyberData 011209 Intercom devices fail to properly store or protect web server administrator credentials, allowing unaut
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today