/Vulnerability Library

Landray EIS SQL注入漏洞

CVE-2025-22214
Verified

Description

Landray EIS 2001 through 2006 contains a SQL injection caused by unsanitized input in Message/fi_message_receiver.aspx?replyid=, letting attackers execute arbitrary SQL commands, exploit requires crafted input.

Severity

Critical

Published Date

February 11, 2026

Template Author

ark

CVE-2025-22214.yaml
9.5Severity

CVSS Metrics

References

https://nvd.nist.gov/vuln/detail/CVE-2025-22214

Remediation Steps

Apply input validation and parameterized queries, update to the latest version if available.