id: CVE-2025-25181

info:
  name: "Advantive VeraCore - SQL Injection"
  author: vedas-arpsyndicate
  severity: high
  description: |
    A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote
    attackers to execute arbitrary SQL commands via the PmSess1 parameter.
  reference:
    - https://www.exploit.observer/?keyword=CVE-2025-25181&match=exact
    - https://subdomain.center/?engine=ammonites&keyword=advantive&match=exact
  classification:
    cvss-score: 7.5
    cve-id: CVE-2025-25181
    cwe-id: CWE-89
  metadata:
    verified: false
    max-request: 1
  tags: cve,cve2025,advantive,sqli

http:
  - method: GET
    path:
      - "{{BaseURL}}/timeoutWarning.asp?PmSess1=1%27"
    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "SQL syntax"
          - "mysql_fetch"
          - "mysql_num_rows"
          - "error in your SQL"
          - "Warning: mysql"
          - "pg_query"
          - "ORA-0"
          - "SQLSTATE"
        condition: or
      - type: status
        status:
          - 200