Cyber Resilience

CVE-2025-1873

Critical

Published: 03 March 2025

Published
03 March 2025
Modified
07 March 2025
KEV Added
—
Patch
—
CVSS Score v4 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0012 30.1th percentile
Risk Priority 19 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-1873 is a critical-severity SQL Injection (CWE-89) vulnerability in Mayurik Best Online News Portal. Its CVSS base score is 9.3 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 30.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2025-1873 is an SQL injection vulnerability (CWE-89) discovered in the 101news application, specifically affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in the admin/contactus.php component. Published on 2025-03-03, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), classifying it as critical due to its potential for severe impacts across confidentiality, integrity, and availability.

Remote, unauthenticated attackers can exploit this vulnerability over the network with low attack complexity and without requiring user interaction. Exploitation enables arbitrary SQL query execution, allowing attackers to potentially extract sensitive data, modify database contents, or disrupt service availability.

The INCIBE-CERT advisory at https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news provides details on this and other vulnerabilities in 101news, including recommended mitigations.

EU & UK References

Vulnerability details

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.

CWE(s)
CWE-89

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

Direct remote exploitation of a public-facing web application via SQL injection in admin/contactus.php parameters.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-1875Same product: Mayurik Best Online News Portal
CVE-2025-1872Same product: Mayurik Best Online News Portal
CVE-2025-1874Same product: Mayurik Best Online News Portal
CVE-2025-1871Same product: Mayurik Best Online News Portal
CVE-2025-1869Same product: Mayurik Best Online News Portal
CVE-2025-1870Same product: Mayurik Best Online News Portal
CVE-2025-2046Same vendor: Mayurik
CVE-2025-1961Same vendor: Mayurik
CVE-2025-1596Same vendor: Mayurik
CVE-2025-2602Same vendor: Mayurik

Affected Assets

mayurik
best online news portal
1.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

Directly prevents SQL injection in the pagetitle and pagedescription parameters by validating all information inputs to admin/contactus.php before processing in database queries.

SI-2 Flaw Remediation good match
prevent

Remediates the specific SQL injection flaw in CVE-2025-1873 by identifying, reporting, and correcting the vulnerable code in 101news version 1.0.

RA-5 Vulnerability Monitoring and Scanning good match
preventdetect

Scans the 101news application for vulnerabilities like the SQL injection in admin/contactus.php, enabling timely detection and remediation.

References