CVEvulnerability
CVE-2025-14598
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2026-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database.
Affected configurations
• cloudilyaerp bet e-portal
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://afnaan.me/cve/cve-2025-14598 Third Party Advisory
- https://cloudilyaerp.com/ Product
- https://github.com/Afnaan-Ahmed/CVE-2025-14598 Exploit, Third Party Advisory
- https://www.kb.cert.org/vuls/id/361400 Third Party Advisory