Base Score

MEDIUM6

CVE-2025-63724

SQL injection (SQL-i) vulnerability in SVX Portal 2.7A via crafted POST request to admin/update_setings.php.

VectorNETWORK

Published Bycve@mitre.org

Published DateNov 14, 2025, 18:15

Weakness Type (CWE):CWE-89

CVSS Metrics

Base Score

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

HIGH

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

HIGH

Availability (A)

LOW

References

https://deepstrike.io/blog/sql-injection-in-svx-portal-v-2-7A

Base Score

MEDIUM6

Weakness Type (CWE):CWE-89

CVSS Metrics

Base Score

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

HIGH

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

HIGH

Availability (A)

LOW