Itflow
1 CVEs
product
Monthly
An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. [CVSS 4.9 MEDIUM]
SQLi
Itflow
NVD
GitHub
CVSS 3.1
4.9
EPSS
0.0%
CVE-2025-67081
EPSS 0%
CVSS 4.9
MEDIUM
This Month
An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile. An attacker with admin account can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database. [CVSS 4.9 MEDIUM]
SQLi
Itflow
NVD
GitHub