CVE-2025-25516
Published: 25 February 2025
Summary
CVE-2025-25516 is a critical-severity SQL Injection (CWE-89) vulnerability in Seacms Seacms. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 36.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents SQL injection in admin_paylog.php by validating and sanitizing untrusted user inputs before incorporation into SQL queries.
Requires identification, reporting, and patching of the specific SQL injection flaw in SeaCMS versions <=13.3 to eliminate the vulnerability.
Enables scanning for SQL injection vulnerabilities like CVE-2025-25516 in the system on a defined frequency to identify and prioritize remediation.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL injection in Seacms admin_paylog.php enables exploitation of a public-facing web application for initial access (T1190) and arbitrary data collection from databases (T1213.006).
NVD Description
Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php.
Deeper analysisAI
CVE-2025-25516 is a SQL injection vulnerability (CWE-89) affecting SeaCMS versions 13.3 and prior, specifically in the admin_paylog.php component. Published on 2025-02-25, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its potential for high-impact exploitation across confidentiality, integrity, and availability.
Remote attackers require no authentication or privileges and can exploit the vulnerability over the network with low complexity and no user interaction. Successful exploitation allows arbitrary SQL query execution, enabling full database compromise including data exfiltration, modification, or deletion.
Advisories are detailed in the referenced GitHub page at https://github.com/Colorado-all/cve/blob/main/seacms/seacms%20V13.3-sql-2.md, which provides technical analysis of the issue. No specific patches or mitigations are outlined in available details.
Details
- CWE(s)