Cuantis CVE-2025-41007

While CVSS and EPSS scores are not provided in the available data, the practical risk level is critical based on multiple factors. The attack vector is network-based with low complexity (SQL injection in a search parameter typically requires straightforward payload construction), requires no authentication or user interaction, and has immediate impact on all three security pillars (confidentiality, integrity, availability) through full database manipulation capabilities. The vulnerability affects all versions of the product (indicated by the wildcard CPE), a vendor patch is confirmed available which suggests active remediation efforts, and the straightforward nature of SQL injection in web applications makes this highly likely to be actively exploited or rapidly weaponized. The combination of unauthenticated remote access, complete database control, and ease of exploitation makes this a genuine critical priority regardless of formal CVSS vector.

An attacker sends an HTTP request to the vulnerable '/search.php' endpoint with a crafted SQL injection payload in the 'search' parameter, such as '?search=1' UNION SELECT database(),user(),version()--'. Because the search input is concatenated directly into the SQL query without sanitization, the injected SQL executes with the privileges of the application's database user, allowing the attacker to immediately extract sensitive data, modify records, or execute stored procedures. This requires only the attacker's ability to reach the web server over the network and knowledge of basic SQL syntax—no authentication credentials, exploitation tools, or complex manipulation is required.