CVE-2025-65235

概要

参考情報

• eslam3kl.gitbook.io · Not Applicable
• eslam3kl.gitbook.io/blog/web-application-findings/cve-2025-65235-ussd-gw-sql-injection-subusers · Exploit
• github.com/eslam3kl · Not Applicable

ussd gateway のその他の脆弱性

• CVE-2025-70614高 8.1OpenCode Systems OC Messaging / USSD Gateway OC Release 6.32.2 contains a broken access control vulnerability in the web-based control panel…
• CVE-2025-65239中 4.3Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers …
• CVE-2025-65238中 6.5Incorrect access control in the getSubUsersByProvider function of OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 allows attacke…
• CVE-2025-65237中 6.1A reflected cross-site scripted (XSS) vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary Jav…
• CVE-2025-65236緊急 9.8OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occ…