CVE-2025-1870
Published: 03 March 2025
Summary
CVE-2025-1870 is a critical-severity SQL Injection (CWE-89) vulnerability in Mayurik Best Online News Portal. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 30.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
SI-10 directly prevents SQL injection by validating and sanitizing the 'pagedescription' parameter before incorporation into SQL queries.
SI-2 requires timely remediation of the specific SQL injection flaw in 101news admin/aboutus.php through patching or compensating controls.
SI-9 mitigates SQL injection by restricting the 'pagedescription' parameter to safe input types, lengths, and formats.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL injection in a remotely accessible web application component directly enables T1190 (Exploit Public-Facing Application) for unauthenticated initial access; arbitrary query execution also directly facilitates T1213.006 (Data from Information Repositories: Databases) for data exfiltration or modification.
NVD Description
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.
Deeper analysisAI
CVE-2025-1870 is an SQL injection vulnerability (CWE-89) discovered in the 101news application, affecting version 1.0 through the "pagedescription" parameter in the admin/aboutus.php component. Published on 2025-03-03, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), classifying it as critical due to its potential for severe impact.
Remote attackers require no privileges, authentication, or user interaction to exploit this vulnerability over the network with low complexity. Exploitation enables high-impact compromise of confidentiality, integrity, and availability, typically through arbitrary SQL query execution that could lead to data exfiltration, modification, or denial of service.
The INCIBE-CERT advisory on multiple vulnerabilities in 101news provides further details, available at https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news.
Details
- CWE(s)