EUVD-2025-18934Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to application
-
DeliveryAccess rentTakeInfoPage endpoint
-
ExploitInject SQL via custTradeName parameter
-
ExecutionExtract database contents
-
ImpactEscalate privileges or exfiltrate data
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Input neutralization, injection prevention
|
| Exploitation Conditions | The attacker must have low-privileged access (PR:L) to the application, as indicated by the CVSS vector. The endpoint /storagework/rentTakeInfoPage.htm must be accessible over the network. No special configuration is required beyond default deployment. The attack is limited by the need for authentication, but no user interaction is needed. |
| Impact | CVSS 4.0 vector AV:N/AC:L/AT:N/PR:L/UI:N indicates low attack complexity and low privileges required, but the EPSS score is only 0.07% (20th percentile), suggesting low exploitation probability. Public exploit code exists, but no CISA KEV listing or active exploitation reports. The SSVC decision would likely be 'Medium' due to automatable exploitation but low prevalence. The risk is moderate: exploitable but not widely targeted. |
| Exploit ScenarioDerived | An attacker with low-privileged access to the Golden Link Secondary System sends a crafted HTTP request to /storagework/rentTakeInfoPage.htm with a malicious custTradeName parameter containing SQL injection payloads. This can extract sensitive data from the database or escalate privileges. Public exploit code is available, simplifying the attack. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Jul 26, 2026
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipulate the custTradeName parameter in /storagework/rentTakeInfoPage.htm, potentially leading to data breach or system compromise. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV. EPSS score is low (0.07%), suggesting limited exploitation likelihood.
Earlier versions of this analysis (1)
RemediationAI
Upgrade to a patched version beyond 20250609 if available; otherwise, apply input validation and parameterized queries to the custTradeName parameter. As a workaround, restrict access to the /storagework/rentTakeInfoPage.htm endpoint to trusted IPs or require additional authentication. Note that blocking the endpoint may impact legitimate functionality.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is a SQL injection (CWE-74) in the Golden Link Secondary System, a web-based management platform. The affected endpoint /storagework/rentTakeInfoPage.htm processes the custTradeName parameter without proper sanitization, allowing an attacker to inject arbitrary SQL commands. The CPE cpe:2.3:a:brilliance:golden_link_secondary_system:*:*:*:*:*:*:*:* indicates all versions up to 20250609 are affected. The root cause is failure to validate or escape user input before including it in SQL queries.
Know when Brilliance gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
PR:L due to required authentication; C:H/I:H as SQLi can read/write data; A:N as availability not impacted.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was found in Brilliance Golden Link Secondary System up to 20250609. It has been rated as critical. Affected by this issue is some unknown functionality of the file /storagework/rentTakeInfoPage.htm. The manipulation of the argument custTradeName leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
Organizations using Brilliance Golden Link Secondary System should be aware of moderate risk from CVE-2025-6276, a injection vulnerability rated CVSS 6.3. Exploitation could allow attackers to execute code or inject malicious input. Proof-of-concept code is publicly available. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: deploy WAF rules, restrict network access, enable logging.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
More in Brilliance
View allThe following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.
The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Acti
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424.
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424.
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250
A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnera
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipul
Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor pat
Exploit-DB