CVE-2025-14190
BaseFortify
Publication date: 2025-12-07
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| chanjet | chanjet_tplus | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
| CWE-89 | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a SQL injection flaw in Chanjet TPlus up to version 20251121. It occurs due to improper handling of the argument 'currentAccId' in a specific file and method, allowing an attacker to manipulate the SQL query. The attack can be initiated remotely, and an exploit has been published.
How can this vulnerability impact me? :
The vulnerability can allow an attacker to execute arbitrary SQL commands on the affected system remotely. This can lead to unauthorized access, data leakage, data modification, or disruption of service.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending crafted POST requests to the endpoint `/tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx?method=Load` with a malicious payload in the `currentAccId` parameter to test for SQL injection. For example, using curl, you can send a POST request with a JSON payload like `{ "currentAccId": "2' and 1=@@version--+" }` to check if the database version is returned or if an error indicative of SQL injection occurs. Monitoring network traffic for such suspicious POST requests targeting this endpoint can also help detect exploitation attempts. [3]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying restrictive firewall rules to block incoming requests to the vulnerable endpoint `/tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx?method=Load` especially those containing the `currentAccId` parameter. Since the vendor has not provided a patch, blocking or filtering malicious traffic at the network perimeter is critical. Additionally, monitoring logs for suspicious activity and restricting access to the affected service can reduce risk until a proper fix is available. [1]