CVE-2025-2601
Published: 21 March 2025
Summary
CVE-2025-2601 is a medium-severity Injection (CWE-74) vulnerability in Mayurik Advocate Office Management System. Its CVSS base score is 6.3 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 18.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
SI-10 directly and comprehensively prevents SQL injection by validating and sanitizing all inputs, including the vulnerable ID argument in activate_reg.php.
SI-2 mandates timely flaw remediation to patch or fix the specific SQL injection vulnerability in Kortex Lite's activate_reg.php.
RA-5 vulnerability scanning detects SQL injection flaws like CVE-2025-2601 in web applications such as Kortex Lite.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL injection in public-facing web app (activate_reg.php) enables remote exploitation (T1190, T1505) and unauthorized database queries for data collection/extraction (T1213.006), with potential CIA impacts.
NVD Description
A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file activate_reg.php. The manipulation of the argument ID leads to sql injection. It is possible…
more
to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Deeper analysisAI
CVE-2025-2601 is a critical SQL injection vulnerability (CWE-74, CWE-89) in SourceCodester Kortex Lite Advocate Office Management System 1.0. The flaw affects an unknown part of the file activate_reg.php, where manipulation of the ID argument enables SQL injection.
The vulnerability is remotely exploitable over the network with low attack complexity and requires low privileges (PR:L) but no user interaction. Attackers can achieve low impacts on confidentiality, integrity, and availability, as reflected in its CVSS 3.1 base score of 6.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
Advisories and details are available via VulDB entries (https://vuldb.com/?ctiid.300585, https://vuldb.com/?id.300585, https://vuldb.com/?submit.517959) and a GitHub issue (https://github.com/Hefei-Coffee/cve/issues/10), along with the vendor site (https://www.sourcecodester.com/).
The exploit has been publicly disclosed and may be used.
Details
- CWE(s)