CVE-2025-4541: LmxCMS POST Request ZtAction.class.php manageZt sql injection
Description
A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\admin\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Es wurde eine kritische Schwachstelle in LmxCMS 1.41 entdeckt. Hiervon betroffen ist die Funktion manageZt der Datei c\admin\ZtAction.class.php der Komponente POST Request Handler. Dank der Manipulation des Arguments sortid mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
Classification
CVE ID: CVE-2025-4541
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.3
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
Vendor: n/a
Product: LmxCMS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 5.71% (scored less or equal to compared to others)
EPSS Date: 2025-05-14 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-4541https://vuldb.com/?id.308286
https://vuldb.com/?ctiid.308286
https://vuldb.com/?submit.567191
https://github.com/xiaoyangsec/LmxCMS-SQL-Injection/blob/main/LmxCMS-SQL-Injection.md